vici: Don't redirect all SAs if no selectors are given
This avoid confusion and redirecting all SAs can now easily be done explicitly (e.g. peer_ip=0.0.0.0/0).
This commit is contained in:
parent
27074f3155
commit
c13eb73719
|
@ -451,7 +451,7 @@ CALLBACK(redirect, vici_message_t*,
|
|||
}
|
||||
if (!peer_ip && !peer_id && !ike && !ike_id)
|
||||
{
|
||||
DBG1(DBG_CFG, "vici redirect all IKE_SAs to '%Y'", gateway);
|
||||
return send_reply(this, "missing redirect selector");
|
||||
}
|
||||
|
||||
sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE);
|
||||
|
|
Loading…
Reference in New Issue