ike: Optionally allow private algorithms for IKE/CHILD_SAs

[thirdparty/strongswan.git] / src / libcharon / sa / ikev2 / tasks / child_create.c

diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c
index e98c1dbcc43392058634f4fb02342d86636c564d..a642a76861b044efcbc8816d362f5689c471628e 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/child_create.c
+++ b/src/libcharon/sa/ikev2/tasks/child_create.c
@@ -564,7 +564,9 @@ static status_t select_and_install(private_child_create_t *this,
        {
                flags |= PROPOSAL_SKIP_DH;
        }
-       if (!this->ike_sa->supports_extension(this->ike_sa, EXT_STRONGSWAN))
+       if (!this->ike_sa->supports_extension(this->ike_sa, EXT_STRONGSWAN) &&
+               !lib->settings->get_bool(lib->settings, "%s.accept_private_algs",
+                                                                FALSE, lib->ns))
        {
                flags |= PROPOSAL_SKIP_PRIVATE;
        }