diff options
| author | Martin Willi <martin@revosec.ch> | 2013-07-25 15:37:13 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-09-04 10:38:37 +0200 |
| commit | 3070697f9f7cc87e5abd9924dccedda9b2656100 (patch) | |
| tree | 37ed9ecd70ba236de9a02ec45262256b24a62579 /src/frontends/osx | |
| parent | beffdc6ab8cb5139c9e0b0ee2e7585c5262e702f (diff) | |
| download | strongswan-3070697f9f7cc87e5abd9924dccedda9b2656100.tar.bz2 strongswan-3070697f9f7cc87e5abd9924dccedda9b2656100.tar.xz | |
ike: support multiple addresses, ranges and subnets in IKE address config
Replace the allowany semantic by a more powerful subnet and IP range matching.
Multiple addresses, DNS names, subnets and ranges can be specified in a comma
separated list. Initiators ignore the ranges/subnets, responders match
configurations against all addresses, ranges and subnets.
Diffstat (limited to 'src/frontends/osx')
| -rw-r--r-- | src/frontends/osx/charon-xpc/xpc_dispatch.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/frontends/osx/charon-xpc/xpc_dispatch.c b/src/frontends/osx/charon-xpc/xpc_dispatch.c index 0757e9baf..df9126c8b 100644 --- a/src/frontends/osx/charon-xpc/xpc_dispatch.c +++ b/src/frontends/osx/charon-xpc/xpc_dispatch.c @@ -84,8 +84,8 @@ static peer_cfg_t* create_peer_cfg(char *name, char *host) { remote_port = IKEV2_NATT_PORT; } - ike_cfg = ike_cfg_create(IKEV2, FALSE, FALSE, "0.0.0.0", FALSE, local_port, - host, FALSE, remote_port, FRAGMENTATION_NO, 0); + ike_cfg = ike_cfg_create(IKEV2, FALSE, FALSE, "0.0.0.0", local_port, + host, remote_port, FRAGMENTATION_NO, 0); ike_cfg->add_proposal(ike_cfg, proposal_create_default(PROTO_IKE)); peer_cfg = peer_cfg_create(name, ike_cfg, CERT_SEND_IF_ASKED, UNIQUE_REPLACE, 1, /* keyingtries */ |