moved force_encap to ike_config, enables responder to enforce udp encapsulation

fixed bugs in force_encap code
This commit is contained in:
Martin Willi
2007-10-01 16:41:34 +00:00
parent 011fb1b97e
commit f53b74c96f
9 changed files with 46 additions and 42 deletions
@@ -522,7 +522,7 @@ static void stroke_add_conn(stroke_msg_t *msg, FILE *out)
else
{
ike_cfg = ike_cfg_create(msg->add_conn.other.sendcert != CERT_NEVER_SEND,
my_host, other_host);
msg->add_conn.force_encap, my_host, other_host);
if (msg->add_conn.algorithms.ike)
{
@@ -572,8 +572,8 @@ static void stroke_add_conn(stroke_msg_t *msg, FILE *out)
msg->add_conn.rekey.ike_lifetime - msg->add_conn.rekey.margin,
msg->add_conn.rekey.margin * msg->add_conn.rekey.fuzz / 100,
msg->add_conn.rekey.reauth, msg->add_conn.mobike,
msg->add_conn.force_encap, msg->add_conn.dpd.delay,
msg->add_conn.dpd.action, my_vip, other_vip);
msg->add_conn.dpd.delay, msg->add_conn.dpd.action,
my_vip, other_vip);
}
child_cfg = child_cfg_create(