ike-cfg: Change how OCSP certificate requests are enabled

[thirdparty/strongswan.git] / src / libcharon / plugins / vici / vici_config.c

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index 838fc360606b621aff8ce67930bf0e098e49e671..c858e9945c4fb957bfa086051936556f01bac958 100644 (file)
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -2672,8 +2672,8 @@ CALLBACK(config_sn, bool,
                .remote = peer.remote_addrs,
                .remote_port = peer.remote_port,
                .no_certreq = !peer.send_certreq,
-               .no_ocsp_certreq = peer.ocsp != OCSP_SEND_BOTH &&
-                                                  peer.ocsp != OCSP_SEND_REQUEST,
+               .ocsp_certreq = peer.ocsp == OCSP_SEND_BOTH ||
+                                               peer.ocsp == OCSP_SEND_REQUEST,
                .force_encap = peer.encap,
                .fragmentation = peer.fragmentation,
                .childless = peer.childless,