Hi Gerald,

> If you can provide a patch, I can test it against iOS5 and iOS6

Please try the attached, but completely untested patch. It should omit
Split-Include attributes for 0.0.0.0/0 selectors. It might require [1]
on top of 5.0.1 to apply cleanly.

Regards
Martin

[1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=6e8f88db
>From a59a80a2f603d1830ee566b4eac9e5fb99fc5574 Mon Sep 17 00:00:00 2001
From: Martin Willi <[email protected]>
Date: Wed, 21 Nov 2012 10:08:04 +0100
Subject: [PATCH] Do not send 0.0.0.0/0 traffic selectors as Split-Include
 Unity attributes

It seems that iOS devices don't like them.
---
 src/libcharon/plugins/unity/unity_provider.c |    8 ++++++--
 1 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/libcharon/plugins/unity/unity_provider.c b/src/libcharon/plugins/unity/unity_provider.c
index 0881b39..d4d374f 100644
--- a/src/libcharon/plugins/unity/unity_provider.c
+++ b/src/libcharon/plugins/unity/unity_provider.c
@@ -62,8 +62,12 @@ METHOD(enumerator_t, attribute_enumerate, bool,
 			!ts->is_dynamic(ts) &&
 			ts->to_subnet(ts, &net, &mask))
 		{
-			ts->destroy(ts);
-			break;
+			if (mask > 0)
+			{
+				ts->destroy(ts);
+				break;
+			}
+			net->destroy(net);
 		}
 		ts->destroy(ts);
 	}
-- 
1.7.5.4

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to