ikev2: Fix handling of more than one hash-and-URL certificate payloads

diff --git a/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c b/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c
index 0dac975e7ea240fbc1162e439e4217ab42db0df3..ca17494de8fe08de18463071cb1aa2a61b5f1e32 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c
+++ b/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c
@@ -229,12 +229,12 @@ static void process_x509(cert_payload_t *payload, auth_cfg_t *auth,
                        return;
                }
                url = strdup(url);
-               if (first)
+               if (*first)
                {       /* first URL is for an end entity certificate */
                        DBG1(DBG_IKE, "received hash-and-url for end entity cert \"%s\"",
                                 url);
                        auth->add(auth, AUTH_HELPER_SUBJECT_HASH_URL, url);
-                       first = FALSE;
+                       *first = FALSE;
                }
                else
                {