CVSROOT: /cvs Module name: src Changes by: r...@cvs.openbsd.org 2015/10/01 04:59:23
Modified files:
sbin/iked : ca.c iked.h ikev2.c ikev2_pld.c policy.c
Log message:
Fix interoperability with Apple iOS9: If we don't get a (valid)
CERTREQ but a CERT, respond with a local CERT that was selected based
on our own policy instead of leaving it out. This seems to be valid
with the RFC that makes the CERTREQ optional and allows to ignore it
or to apply an own policy.
OK mikeb@ sthen@
