CVSROOT: /cvs
Module name: src
Changes by: to...@cvs.openbsd.org 2020/06/25 07:05:59
Modified files:
sbin/iked : parse.y
Log message:
Rework 'ikeauth' configuration option. The key and cert checks in the config
parser aren't needed as they are checked at runtime during the handshake.
Moreover, these checks during startup of the daemon never worked
properly when dstid was not explicitly configured. The dstid depends
on the ID message payload which is only known after the initial handshake.
ok patrick@
