do not build "null ESP and no AUTH" proposal. (racoon 174) by Tom Lendacky

This commit is contained in:
itojun 2003-10-23 07:23:50 +00:00
parent 38a484b2d0
commit f90a2e28b1

View File

@ -1,4 +1,4 @@
/* $KAME: ipsec_doi.c,v 1.162 2003/06/27 07:32:38 sakane Exp $ */
/* $KAME: ipsec_doi.c,v 1.164 2003/10/23 07:22:45 itojun Exp $ */
/*
* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
@ -30,7 +30,7 @@
*/
#include <sys/cdefs.h>
__RCSID("$NetBSD: ipsec_doi.c,v 1.13 2003/07/12 09:37:10 itojun Exp $");
__RCSID("$NetBSD: ipsec_doi.c,v 1.14 2003/10/23 07:23:50 itojun Exp $");
#include <sys/types.h>
#include <sys/param.h>
@ -2674,13 +2674,8 @@ setph2proposal0(iph2, pp, pr)
* with no authentication transform.
*/
if (tr->trns_id == IPSECDOI_ESP_NULL &&
tr->authtype == IPSECDOI_ATTR_AUTH_NONE) {
plog(LLV_ERROR, LOCATION, NULL,
"attr AUTH must be present "
"for ESP NULL encryption.\n");
vfree(p);
return NULL;
}
tr->authtype == IPSECDOI_ATTR_AUTH_NONE)
continue;
break;
}