diff options
| author | Mirko Parthey <mirko.parthey@informatik.tu-chemnitz.de> | 2011-10-25 01:25:15 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2011-10-25 09:44:17 +0200 |
| commit | f3da58aaa926e633e01c3a8abcc65d0b76939dea (patch) | |
| tree | f53ff52f0d6d4c7e3743c195c6b6725f0a046313 /src/starter/confread.c | |
| parent | f0a8bf47f7d01ded310e60b3ec1e7204284dd7f7 (diff) | |
| download | strongswan-f3da58aaa926e633e01c3a8abcc65d0b76939dea.tar.bz2 strongswan-f3da58aaa926e633e01c3a8abcc65d0b76939dea.tar.xz | |
Fix DNS error handling for keyexchange=ike.
starter fails to load a connection when a peer's DNS name is temporarily
unresolvable and keyexchange=ike was specified, which defaults to IKEv2.
The connection loads just fine in case of keyexchange=ikev2.
Diffstat (limited to 'src/starter/confread.c')
| -rw-r--r-- | src/starter/confread.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/starter/confread.c b/src/starter/confread.c index 5f96fb1bc..089be1aa5 100644 --- a/src/starter/confread.c +++ b/src/starter/confread.c @@ -466,7 +466,7 @@ static void handle_dns_failure(const char *label, starter_end_t *end, plog("# fallback to %s=%%any due to '%%' prefix or %sallowany=yes", label, label); } - else if (!end->host || conn->keyexchange != KEY_EXCHANGE_IKEV2) + else if (!end->host || conn->keyexchange == KEY_EXCHANGE_IKEV1) { /* declare an error */ cfg->err++; |