[Bug 203308] wildcard patch in ipsec-tools breaks aggressive tunnels

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Sep 24 23:44:49 UTC 2015


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203308

andywhite at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |andywhite at gmail.com

--- Comment #1 from andywhite at gmail.com ---
Created attachment 161355
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=161355&action=edit
patch to fix aggressive mode tunnels with PSK

wilcard patch exposures existing bug where agressive tunnels using ip addresses
for identification were not matching the entry in the PSK file, due to the
identifier not being cast to a 'xxx.xxx.xxx.xxx' notation.

This patch checks if the identity type is and ADDR and if it is, uses a
sockaddr struct to call the getpskbyaddr function instead of getpskbyname.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list