Send INITIAL_CONTACT even if we have a unique policy

This commit is contained in:
Martin Willi 2011-01-10 11:54:10 +01:00
parent 5fee822a93
commit 719c33b41a
2 changed files with 2 additions and 4 deletions

3
NEWS
View File

@ -42,8 +42,7 @@ strongswan-4.5.1
xcbc algorithms. xcbc algorithms.
- The IKEv2 daemon supports the INITIAL_CONTACT notify as initiator and - The IKEv2 daemon supports the INITIAL_CONTACT notify as initiator and
responder. The notify is sent when initiating configurations with a unique responder.
policy, set in ipsec.conf via the global 'uniqueids' option.
- The conftest conformance testing framework enables the IKEv2 stack to perform - The conftest conformance testing framework enables the IKEv2 stack to perform
many tests using a distinct tool and configuration frontend. Various hooks many tests using a distinct tool and configuration frontend. Various hooks

View File

@ -429,8 +429,7 @@ static status_t build_i(private_ike_auth_t *this, message_t *message)
get_reserved_id_bytes(this, id_payload); get_reserved_id_bytes(this, id_payload);
message->add_payload(message, (payload_t*)id_payload); message->add_payload(message, (payload_t*)id_payload);
if (idr && message->get_message_id(message) == 1 && if (idr && message->get_message_id(message))
this->peer_cfg->get_unique_policy(this->peer_cfg) != UNIQUE_NO)
{ {
host_t *host; host_t *host;