ikev1: Avoid modifying local auth config when detecting pubkey method
If it was necessary to pass the local certificates we could probably clone the config (but we don't do that either when later looking for the key to actually authenticate). Passing auth adds the same subject cert to the config over and over again (I guess we could also try to prevent that by searching for duplicates).
This commit is contained in:
1 parent
444565325a
commit
904f93f655
1 file changed
+1
-1
@@ -404,7 +404,7 @@ static auth_method_t get_pubkey_method(private_phase1_t *this, auth_cfg_t *auth)
|
||||
id = (identification_t*)auth->get(auth, AUTH_RULE_IDENTITY);
|
||||
if (id)
|
||||
{
|
||||
private = lib->credmgr->get_private(lib->credmgr, KEY_ANY, id, auth);
|
||||
private = lib->credmgr->get_private(lib->credmgr, KEY_ANY, id, NULL);
|
||||
if (private)
|
||||
{
|
||||
switch (private->get_type(private))
|
||||
|
||||
Reference in new issue
Block a user