denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

unity: Change local TS to 0.0.0.0/0 as responder

Browse Source 
Cisco clients and Shrew expect a remote TS of 0.0.0.0/0 if Unity is
used, otherwise Quick Mode fails.
This commit is contained in:
Tobias Brunner
2014-01-23 10:35:21 +01:00
parent 685579d6d8
commit f8262aa1a6
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/unity/unity_narrow.c
+7 -4
View File
@@ -97,9 +97,9 @@ static void narrow_initiator(private_unity_narrow_t *this, ike_sa_t *ike_sa,
} }
/** /**
* As initiator, bump up TS to 0.0.0.0/0 for on-the-wire bits * As initiator and responder, bump up TS to 0.0.0.0/0 for on-the-wire bits
*/ */
static void narrow_initiator_pre(linked_list_t *list) static void narrow_pre(linked_list_t *list, char *side)
{ {
traffic_selector_t *ts; traffic_selector_t *ts;
@@ -112,7 +112,7 @@ static void narrow_initiator_pre(linked_list_t *list)
"255.255.255.255", 65535); "255.255.255.255", 65535);
if (ts) if (ts)
{ {
DBG2(DBG_CFG, "changing proposed traffic selectors for other:"); DBG2(DBG_CFG, "changing proposed traffic selectors for %s:", side);
DBG2(DBG_CFG, " %R", ts); DBG2(DBG_CFG, " %R", ts);
list->insert_last(list, ts); list->insert_last(list, ts);
} }
@@ -149,12 +149,15 @@ METHOD(listener_t, narrow, bool,
switch (type) switch (type)
{ {
case NARROW_INITIATOR_PRE_AUTH: case NARROW_INITIATOR_PRE_AUTH:
narrow_initiator_pre(remote); narrow_pre(remote, "other");
break; break;
case NARROW_INITIATOR_POST_AUTH: case NARROW_INITIATOR_POST_AUTH:
narrow_initiator(this, ike_sa, narrow_initiator(this, ike_sa,
child_sa->get_config(child_sa), remote); child_sa->get_config(child_sa), remote);
break; break;
case NARROW_RESPONDER:
narrow_pre(local, "us");
break;
case NARROW_RESPONDER_POST: case NARROW_RESPONDER_POST:
narrow_responder_post(child_sa->get_config(child_sa), local); narrow_responder_post(child_sa->get_config(child_sa), local);
break; break;