From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 5 Mar 2020 15:24:49 +0000 (+0000)
Subject: IPsec: Always send our host certificate to all RW clients
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=9f3742222a47e6ec6a2e8bd4224fe4861c8a888c;p=people%2Fms%2Fipfire-2.x.git

IPsec: Always send our host certificate to all RW clients

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index 55b2506b4b..de9f19bdba 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -350,6 +350,12 @@ sub writeipsecfiles {
 
 		print CONF "\tleftfirewall=yes\n";
 		print CONF "\tlefthostaccess=yes\n";
+
+		# Always send the host certificate
+		if ($lconfighash{$key}[3] eq 'host') {
+			print CONF "\tleftsendcert=always\n";
+		}
+
 		print CONF "\tright=$lconfighash{$key}[10]\n";
 
 		if ($lconfighash{$key}[3] eq 'net') {