From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 7 Apr 2020 14:59:28 +0000 (+0200)
Subject: ikev1: Store fallback identity (IP address) on IKE_SA's auth-cfg
X-Git-Tag: 5.9.0dr1~24
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b8f02fc42d07c522730e0227849b11e3982ef7d7;p=thirdparty%2Fstrongswan.git

ikev1: Store fallback identity (IP address) on IKE_SA's auth-cfg

The other auth-cfg object is shared via peer-cfg, so we must not
modify it.  It's only stored to simplify memory management.

Fixes #3394.
---

diff --git a/src/libcharon/sa/ikev1/phase1.c b/src/libcharon/sa/ikev1/phase1.c
index f3c053d363..18eec7a1bc 100644
--- a/src/libcharon/sa/ikev1/phase1.c
+++ b/src/libcharon/sa/ikev1/phase1.c
@@ -629,6 +629,7 @@ METHOD(phase1_t, get_id, identification_t*,
 			if (!me->is_anyaddr(me))
 			{
 				id = identification_create_from_sockaddr(me->get_sockaddr(me));
+				auth = this->ike_sa->get_auth_cfg(this->ike_sa, TRUE);
 				auth->add(auth, AUTH_RULE_IDENTITY, id);
 			}
 		}