proposal: Make all key exchange transforms optional in ESP/AH proposals

diff --git a/src/libstrongswan/crypto/proposal/proposal.c b/src/libstrongswan/crypto/proposal/proposal.c
index 83a8be689d00e5fe6bfcaf86fff035cd65b14060..097d0bc65ef237657d600e37f243efd55c7f6feb 100644 (file)
--- a/src/libstrongswan/crypto/proposal/proposal.c
+++ b/src/libstrongswan/crypto/proposal/proposal.c
@@ -318,7 +318,7 @@ static bool select_algo(private_proposal_t *this, proposal_t *other,
        uint16_t alg1, alg2, ks1, ks2;
        bool found = FALSE, optional = FALSE;
 
-       if (type == KEY_EXCHANGE_METHOD)
+       if (is_ke_transform(type))
        {
                optional = this->protocol == PROTO_ESP || this->protocol == PROTO_AH;
        }