vici: Don't redirect all SAs if no selectors are given

This avoid confusion and redirecting all SAs can now easily be done
explicitly (e.g. peer_ip=0.0.0.0/0).

diff --git a/src/libcharon/plugins/vici/vici_control.c b/src/libcharon/plugins/vici/vici_control.c
index d619a8028ab5fb20e86bf00429310e0a55abffa9..c526d2fda2e27752aeb21a72d50e85269d8ef12a 100644 (file)
--- a/src/libcharon/plugins/vici/vici_control.c
+++ b/src/libcharon/plugins/vici/vici_control.c
@@ -451,7 +451,7 @@ CALLBACK(redirect, vici_message_t*,
        }
        if (!peer_ip && !peer_id && !ike && !ike_id)
        {
-               DBG1(DBG_CFG, "vici redirect all IKE_SAs to '%Y'", gateway);
+               return send_reply(this, "missing redirect selector");
        }
 
        sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE);