Mercurial > hg > freeDiameter
comparison libfdcore/p_ce.c @ 1265:4ca14a36ae66
Add Inband-Security-Id AVP to CEA if the CER contains one even if it is the secure port
| author | Sebastien Decugis <sdecugis@freediameter.net> |
|---|---|
| date | Thu, 11 Sep 2014 17:11:17 +0800 |
| parents | 4ad4d614acfa |
| children | 25fad6714991 |
comparison
equal
deleted
inserted
replaced
| 1264:abf1e51047a1 | 1265:4ca14a36ae66 |
|---|---|
| 948 } | 948 } |
| 949 | 949 |
| 950 /* Do not send the ISI IPsec if we are using the new mechanism */ | 950 /* Do not send the ISI IPsec if we are using the new mechanism */ |
| 951 if ((isi == PI_SEC_NONE) && (! (peer->p_hdr.info.config.pic_flags.sec & PI_SEC_TLS_OLD))) | 951 if ((isi == PI_SEC_NONE) && (! (peer->p_hdr.info.config.pic_flags.sec & PI_SEC_TLS_OLD))) |
| 952 isi = 0; | 952 isi = 0; |
| 953 } else if (peer->p_hdr.info.runtime.pir_isi & PI_SEC_TLS_OLD) { | |
| 954 /* Seem some weird peers are sending the Inband-Security-Id AVP on the secure port... No harm */ | |
| 955 isi = PI_SEC_TLS_OLD; | |
| 953 } | 956 } |
| 954 | 957 |
| 955 /* Reply a CEA */ | 958 /* Reply a CEA */ |
| 956 CHECK_FCT( fd_msg_new_answer_from_req ( fd_g_config->cnf_dict, &msg, 0 ) ); | 959 CHECK_FCT( fd_msg_new_answer_from_req ( fd_g_config->cnf_dict, &msg, 0 ) ); |
| 957 CHECK_FCT( fd_msg_rescode_set(msg, "DIAMETER_SUCCESS", NULL, NULL, 0 ) ); | 960 CHECK_FCT( fd_msg_rescode_set(msg, "DIAMETER_SUCCESS", NULL, NULL, 0 ) ); |