vici: Don't redirect all SAs if no selectors are given

This avoid confusion and redirecting all SAs can now easily be done
explicitly (e.g. peer_ip=0.0.0.0/0).
This commit is contained in:
Tobias Brunner 2015-05-12 17:49:46 +02:00
parent 27074f3155
commit c13eb73719
1 changed files with 1 additions and 1 deletions

View File

@ -451,7 +451,7 @@ CALLBACK(redirect, vici_message_t*,
}
if (!peer_ip && !peer_id && !ike && !ike_id)
{
DBG1(DBG_CFG, "vici redirect all IKE_SAs to '%Y'", gateway);
return send_reply(this, "missing redirect selector");
}
sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE);