diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2015-05-12 17:49:46 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2016-03-04 16:03:00 +0100 |
| commit | c13eb73719958e004cf8ae362f3801a3f3f243b0 (patch) | |
| tree | 4bb1f68eead073a12496578714d0e202ac6db0dd /src | |
| parent | 27074f31557f15efc1dfaf1c1e02e4e66c8d63d0 (diff) | |
| download | strongswan-c13eb73719958e004cf8ae362f3801a3f3f243b0.tar.bz2 strongswan-c13eb73719958e004cf8ae362f3801a3f3f243b0.tar.xz | |
vici: Don't redirect all SAs if no selectors are given
This avoid confusion and redirecting all SAs can now easily be done
explicitly (e.g. peer_ip=0.0.0.0/0).
Diffstat (limited to 'src')
| -rw-r--r-- | src/libcharon/plugins/vici/vici_control.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libcharon/plugins/vici/vici_control.c b/src/libcharon/plugins/vici/vici_control.c index d619a8028..c526d2fda 100644 --- a/src/libcharon/plugins/vici/vici_control.c +++ b/src/libcharon/plugins/vici/vici_control.c @@ -451,7 +451,7 @@ CALLBACK(redirect, vici_message_t*, } if (!peer_ip && !peer_id && !ike && !ike_id) { - DBG1(DBG_CFG, "vici redirect all IKE_SAs to '%Y'", gateway); + return send_reply(this, "missing redirect selector"); } sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE); |