proposal: Make all key exchange transforms optional in ESP/AH proposals

diff --git a/src/libstrongswan/crypto/proposal/proposal.c b/src/libstrongswan/crypto/proposal/proposal.c
index 5c568a081685d168eaef97905a390b06e06bc0c8..ba6b3f0f2f01c1b4542e3021a4309e7d17067c62 100644 (file)
--- a/src/libstrongswan/crypto/proposal/proposal.c
+++ b/src/libstrongswan/crypto/proposal/proposal.c
@@ -322,7 +322,7 @@ static bool select_algo(private_proposal_t *this, proposal_t *other,
        uint16_t alg1, alg2, ks1, ks2;
        bool found = FALSE, optional = FALSE;
 
-       if (type == KEY_EXCHANGE_METHOD)
+       if (is_ke_transform(type))
        {
                optional = this->protocol == PROTO_ESP || this->protocol == PROTO_AH;
        }