ikev1: Store fallback identity (IP address) on IKE_SA's auth-cfg

The other auth-cfg object is shared via peer-cfg, so we must not
modify it.  It's only stored to simplify memory management.

Fixes #3394.

diff --git a/src/libcharon/sa/ikev1/phase1.c b/src/libcharon/sa/ikev1/phase1.c
index f3c053d3636a745d8ec26af442acd119382718a3..18eec7a1bc6092a0d905d18764835f6b1b457b2a 100644 (file)
--- a/src/libcharon/sa/ikev1/phase1.c
+++ b/src/libcharon/sa/ikev1/phase1.c
@@ -629,6 +629,7 @@ METHOD(phase1_t, get_id, identification_t*,
                        if (!me->is_anyaddr(me))
                        {
                                id = identification_create_from_sockaddr(me->get_sockaddr(me));
+                               auth = this->ike_sa->get_auth_cfg(this->ike_sa, TRUE);
                                auth->add(auth, AUTH_RULE_IDENTITY, id);
                        }
                }