denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update_peerid() does not accept %any as a certificate's subjectAltName

Browse Source
This commit is contained in:
Andreas Steffen committed 2008-07-09 22:13:39 +00:00
1 parent e7991a2eef
commit 858a9fd584
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/plugins/stroke/stroke_config.c
+1 -1
View File
@@ -209,7 +209,7 @@ static peer_cfg_t *get_peer_cfg_by_name(private_stroke_config_t *this, char *nam
*/ */
static identification_t *update_peerid(certificate_t *cert, identification_t *id) static identification_t *update_peerid(certificate_t *cert, identification_t *id)
{ {
if (!cert->has_subject(cert, id)) if (id->get_type(id) == ID_ANY || !cert->has_subject(cert, id))
{ {
DBG1(DBG_CFG, " peerid %D not confirmed by certificate, " DBG1(DBG_CFG, " peerid %D not confirmed by certificate, "
"defaulting to subject DN", id); "defaulting to subject DN", id);