From 1db918c4f89fa97ecf04ec29b07960e7cf91fa5c Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Wed, 4 Nov 2015 17:04:11 +0100 Subject: vici: Use an empty local auth round if none given While it hardly makes sense to use none for negotiated SAs, it actually does when installing shunt policies. --- src/libcharon/plugins/vici/vici_config.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c index 2a652e014..7f7ce61a1 100644 --- a/src/libcharon/plugins/vici/vici_config.c +++ b/src/libcharon/plugins/vici/vici_config.c @@ -1886,9 +1886,8 @@ CALLBACK(config_sn, bool, if (peer.local->get_count(peer.local) == 0) { - free_peer_data(&peer); - peer.request->reply = create_reply("missing local auth config"); - return FALSE; + auth_cfg = auth_cfg_create(); + peer.local->insert_last(peer.local, auth_cfg); } if (peer.remote->get_count(peer.remote) == 0) { -- cgit v1.2.3