child-cfg: Ignore duplicate proposals

If ESP proposals are added once with and once without DH groups
duplicates result during IKE_AUTH when DH groups are stripped.

diff --git a/src/libcharon/config/child_cfg.c b/src/libcharon/config/child_cfg.c
index 7e4a1433d29563a9f1d33dde00fa137b1c870ead..ed7c0d406f406806c87ad2fed3c76f0b876dbad6 100644 (file)
--- a/src/libcharon/config/child_cfg.c
+++ b/src/libcharon/config/child_cfg.c
@@ -163,6 +163,11 @@ METHOD(child_cfg_t, add_proposal, void,
        }
 }
 
+static bool match_proposal(proposal_t *item, proposal_t *proposal)
+{
+       return item->equals(item, proposal);
+}
+
 METHOD(child_cfg_t, get_proposals, linked_list_t*,
        private_child_cfg_t *this, bool strip_dh)
 {
@@ -178,6 +183,12 @@ METHOD(child_cfg_t, get_proposals, linked_list_t*,
                {
                        current->strip_dh(current, MODP_NONE);
                }
+               if (proposals->find_first(proposals, (linked_list_match_t)match_proposal,
+                                                                 NULL, current) == SUCCESS)
+               {
+                       current->destroy(current);
+                       continue;
+               }
                proposals->insert_last(proposals, current);
        }
        enumerator->destroy(enumerator);