denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

send a certreq as initiator if other_ca is set

Browse Source
This commit is contained in:
Andreas Steffen
2006-10-28 15:37:23 +00:00
parent 6ae7d265fb
commit e44f4d7eef
1 changed files with 19 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/sa/transactions/ike_auth.c
+19 -2
View File
@@ -221,8 +221,25 @@ static status_t get_request(private_ike_auth_t *this, message_t **result)
request->add_payload(request, (payload_t*)my_id_payload);
}
{ /* TODO: build certreq payload */
/* build certificate request payload */
if (this->connection->get_certreq_policy(this->connection) != CERT_NEVER_SEND)
{
certreq_payload_t *certreq_payload;
identification_t *other_ca = this->policy->get_other_ca(this->policy);
if (other_ca->get_type(other_ca) == ID_ANY)
{
}
else
{
x509_t *cacert = charon->credentials->get_ca_certificate(charon->credentials, other_ca);
DBG2(DBG_IKE, "certreq with ca: '%D'", other_ca);
certreq_payload = certreq_payload_create_from_x509(cacert);
request->add_payload(request, (payload_t*)certreq_payload);
}
}
/* build certificate payload. TODO: Handle certreq from init_ike_sa. */