Add missing AUTH_RULE for trusted self-signed peer certificates

diff --git a/src/libstrongswan/credentials/credential_manager.c b/src/libstrongswan/credentials/credential_manager.c
index 91ed3cfb46c4d9680c50b951265e1b25f0b2860d..27b97eab33ac9a142d17949066c48f7c8c4e8331 100644 (file)
--- a/src/libstrongswan/credentials/credential_manager.c
+++ b/src/libstrongswan/credentials/credential_manager.c
@@ -716,6 +716,11 @@ METHOD(enumerator_t, trusted_enumerate, bool,
                                DBG1(DBG_CFG, "  using trusted certificate \"%Y\"",
                                         this->pretrusted->get_subject(this->pretrusted));
                                *cert = this->pretrusted;
+                               if (!this->auth->get(this->auth, AUTH_RULE_SUBJECT_CERT))
+                               {       /* add cert to auth info, if not returned by trustchain */
+                                       this->auth->add(this->auth, AUTH_RULE_SUBJECT_CERT,
+                                                                       this->pretrusted->get_ref(this->pretrusted));
+                               }
                                if (auth)
                                {
                                        *auth = this->auth;