changeset 1265:4ca14a36ae66

Add Inband-Security-Id AVP to CEA if the CER contains one even if it is the secure port
author Sebastien Decugis <sdecugis@freediameter.net>
date Thu, 11 Sep 2014 17:11:17 +0800
parents abf1e51047a1
children 85a425a201b6
files libfdcore/p_ce.c
diffstat 1 files changed, 3 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/libfdcore/p_ce.c	Mon May 12 00:16:19 2014 +0800
+++ b/libfdcore/p_ce.c	Thu Sep 11 17:11:17 2014 +0800
@@ -950,6 +950,9 @@
 		/* Do not send the ISI IPsec if we are using the new mechanism */
 		if ((isi == PI_SEC_NONE) && (! (peer->p_hdr.info.config.pic_flags.sec & PI_SEC_TLS_OLD)))
 			isi = 0;
+	} else if (peer->p_hdr.info.runtime.pir_isi & PI_SEC_TLS_OLD) {
+		/* Seem some weird peers are sending the Inband-Security-Id AVP on the secure port... No harm */
+		isi = PI_SEC_TLS_OLD;
 	}
 	
 	/* Reply a CEA */
"Welcome to our mercurial repository"