diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2006-10-28 15:37:23 +0000 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2006-10-28 15:37:23 +0000 |
| commit | e44f4d7eefc1cfa2973bacfac2b9ea8190a275f5 (patch) | |
| tree | e4162313c37969338de89d71357db7ab7d4cf661 | |
| parent | 6ae7d265fb41b6e55353f3fb9d8ed2f552ac6547 (diff) | |
| download | strongswan-e44f4d7eefc1cfa2973bacfac2b9ea8190a275f5.tar.bz2 strongswan-e44f4d7eefc1cfa2973bacfac2b9ea8190a275f5.tar.xz | |
send a certreq as initiator if other_ca is set
| -rw-r--r-- | src/charon/sa/transactions/ike_auth.c | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/src/charon/sa/transactions/ike_auth.c b/src/charon/sa/transactions/ike_auth.c index 1bb2534d2..82e75fae0 100644 --- a/src/charon/sa/transactions/ike_auth.c +++ b/src/charon/sa/transactions/ike_auth.c @@ -221,8 +221,25 @@ static status_t get_request(private_ike_auth_t *this, message_t **result) request->add_payload(request, (payload_t*)my_id_payload); } - { /* TODO: build certreq payload */ - + /* build certificate request payload */ + if (this->connection->get_certreq_policy(this->connection) != CERT_NEVER_SEND) + { + certreq_payload_t *certreq_payload; + + identification_t *other_ca = this->policy->get_other_ca(this->policy); + + if (other_ca->get_type(other_ca) == ID_ANY) + { + + } + else + { + x509_t *cacert = charon->credentials->get_ca_certificate(charon->credentials, other_ca); + + DBG2(DBG_IKE, "certreq with ca: '%D'", other_ca); + certreq_payload = certreq_payload_create_from_x509(cacert); + request->add_payload(request, (payload_t*)certreq_payload); + } } /* build certificate payload. TODO: Handle certreq from init_ike_sa. */ |