sql: Also do a reversed ID match

This is required for the case where IDr is not sent (i.e. is %any).
The backend manager does the same.

Fixes #1044.

diff --git a/src/libcharon/plugins/sql/sql_config.c b/src/libcharon/plugins/sql/sql_config.c
index c47c7c0f86dc7fab5cecc02829aff9e21fd6a05d..ce24d180a761079ac9192fb69c92ba0e557cda49 100644 (file)
--- a/src/libcharon/plugins/sql/sql_config.c
+++ b/src/libcharon/plugins/sql/sql_config.c
@@ -323,6 +323,14 @@ static peer_cfg_t *get_peer_cfg_by_id(private_sql_config_t *this, int id)
        return peer_cfg;
 }
 
+/**
+ * Check if the two IDs match (the first one is optional)
+ */
+static inline bool id_matches(identification_t *id, identification_t *sql_id)
+{
+       return !id || id->matches(id, sql_id) || sql_id->matches(sql_id, id);
+}
+
 /**
  * Build a peer config from an SQL query
  */
@@ -352,8 +360,7 @@ static peer_cfg_t *build_peer_cfg(private_sql_config_t *this, enumerator_t *e,
 
                local_id = identification_create_from_encoding(l_type, l_data);
                remote_id = identification_create_from_encoding(r_type, r_data);
-               if ((me && !me->matches(me, local_id)) ||
-                       (other && !other->matches(other, remote_id)))
+               if (!id_matches(me, local_id) || !id_matches(other, remote_id))
                {
                        local_id->destroy(local_id);
                        remote_id->destroy(remote_id);