Set a condition flag if peer has been authenticated using XAuth

diff --git a/src/libcharon/sa/ike_sa.h b/src/libcharon/sa/ike_sa.h
index c5bf60b5d6aae4c3cc82e05dff70a72078ddca27..b7c96fdfb9c43b51d5392dbee9687dbe9f35ceb3 100644 (file)
--- a/src/libcharon/sa/ike_sa.h
+++ b/src/libcharon/sa/ike_sa.h
@@ -159,6 +159,11 @@ enum ike_condition_t {
         * Initial contact received
         */
        COND_INIT_CONTACT_SEEN = (1<<8),
+
+       /**
+        * Peer has been authenticated using XAuth
+        */
+       COND_XAUTH_AUTHENTICATED = (1<<9),
 };
 
 /**

diff --git a/src/libcharon/sa/ikev1/tasks/xauth.c b/src/libcharon/sa/ikev1/tasks/xauth.c
index 20d6d8a171dd26adb5761f5d26b787ed3f45d1a9..7e7e84a8ea0f012b10066bba0fc622cee4b855ec 100755 (executable)
--- a/src/libcharon/sa/ikev1/tasks/xauth.c
+++ b/src/libcharon/sa/ikev1/tasks/xauth.c
@@ -310,6 +310,7 @@ METHOD(task_t, process_i_status, status_t,
                return FAILED;
        }
        establish(this);
+       this->ike_sa->set_condition(this->ike_sa, COND_XAUTH_AUTHENTICATED, TRUE);
        return SUCCESS;
 }