From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 22 Oct 2020 11:13:00 +0000 (+0200)
Subject: proposal: Accept NONE for additional key exchanges also for IKE proposals
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=34fe9e26702aa65c25c9d181ff44db540d4dc4d6;p=thirdparty%2Fstrongswan.git

proposal: Accept NONE for additional key exchanges also for IKE proposals
---

diff --git a/src/libstrongswan/crypto/proposal/proposal.c b/src/libstrongswan/crypto/proposal/proposal.c
index ff7884d9a3..b8c74906ea 100644
--- a/src/libstrongswan/crypto/proposal/proposal.c
+++ b/src/libstrongswan/crypto/proposal/proposal.c
@@ -324,7 +324,8 @@ static bool select_algo(private_proposal_t *this, proposal_t *other,
 
 	if (is_ke_transform(type))
 	{
-		optional = this->protocol == PROTO_ESP || this->protocol == PROTO_AH;
+		optional = this->protocol == PROTO_ESP || this->protocol == PROTO_AH ||
+				   type != KEY_EXCHANGE_METHOD;
 	}
 
 	e1 = create_enumerator(this, type);