diff options
| author | Martin Willi <martin@revosec.ch> | 2012-03-21 16:57:06 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2012-03-22 09:06:31 +0100 |
| commit | 83d77866f476ed0968283a8a8f349c48d92a1158 (patch) | |
| tree | ebb6b9a37a501f428bd583dc3e1f2cc37ae15582 /src | |
| parent | 79f39ecf5dbe611841b636401483617c5a43b1e9 (diff) | |
| download | strongswan-83d77866f476ed0968283a8a8f349c48d92a1158.tar.bz2 strongswan-83d77866f476ed0968283a8a8f349c48d92a1158.tar.xz | |
Store authentication info of a XAUTH round on IKE_SA
Diffstat (limited to 'src')
| -rwxr-xr-x | src/libcharon/sa/ikev1/tasks/xauth.c | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/src/libcharon/sa/ikev1/tasks/xauth.c b/src/libcharon/sa/ikev1/tasks/xauth.c index aa79811f7..059877edd 100755 --- a/src/libcharon/sa/ikev1/tasks/xauth.c +++ b/src/libcharon/sa/ikev1/tasks/xauth.c @@ -167,6 +167,20 @@ static bool establish(private_xauth_t *this) return TRUE; } +/** + * Create auth config after successful authentication + */ +static void add_auth_cfg(private_xauth_t *this, identification_t *id, bool local) +{ + auth_cfg_t *auth; + + auth = auth_cfg_create(); + auth->add(auth, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_XAUTH); + auth->add(auth, AUTH_RULE_XAUTH_IDENTITY, id->clone(id)); + + this->ike_sa->add_auth_cfg(this->ike_sa, local, auth); +} + METHOD(task_t, build_i_status, status_t, private_xauth_t *this, message_t *message) { @@ -283,6 +297,7 @@ METHOD(task_t, process_r, status_t, { DBG1(DBG_IKE, "XAuth authentication of '%Y' (myself) successful", this->xauth->get_identity(this->xauth)); + add_auth_cfg(this, this->xauth->get_identity(this->xauth), TRUE); } else { @@ -356,6 +371,7 @@ METHOD(task_t, process_i, status_t, break; } DBG1(DBG_IKE, "XAuth authentication of '%Y' successful", id); + add_auth_cfg(this, id, FALSE); this->status = XAUTH_OK; break; case FAILED: |