From 17584a1ae04ec3551fbbaa57492031daba1bd5f8 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 5 Nov 2019 10:22:36 +0100 Subject: [PATCH] proposal: Make all key exchange transforms optional in ESP/AH proposals --- src/libstrongswan/crypto/proposal/proposal.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstrongswan/crypto/proposal/proposal.c b/src/libstrongswan/crypto/proposal/proposal.c index 5c568a0816..ba6b3f0f2f 100644 --- a/src/libstrongswan/crypto/proposal/proposal.c +++ b/src/libstrongswan/crypto/proposal/proposal.c @@ -322,7 +322,7 @@ static bool select_algo(private_proposal_t *this, proposal_t *other, uint16_t alg1, alg2, ks1, ks2; bool found = FALSE, optional = FALSE; - if (type == KEY_EXCHANGE_METHOD) + if (is_ke_transform(type)) { optional = this->protocol == PROTO_ESP || this->protocol == PROTO_AH; }