The RFC specifies that to accept a proposal, we must select a transform
authorpatrick <patrick@openbsd.org>
Sun, 3 Dec 2017 21:02:06 +0000 (21:02 +0000)
committerpatrick <patrick@openbsd.org>
Sun, 3 Dec 2017 21:02:06 +0000 (21:02 +0000)
commit4cbd1be50ad1430fe18019adbbf7c36e9fda02ea
treef6ab0f0eb8ed080fabfac48ec7f282098cfdf038
parent86bde791057f40798e8da2d6ffb0aeabbeaf2e8c
The RFC specifies that to accept a proposal, we must select a transform
for each transform type.  We do some sanity checks, for instance we do
require an encryption transform for ESP, but that's not enough.  We need
to check that for every proposed transform type we have found a matching
transform in our own proposal.

ok sthen@
sbin/iked/ikev2.c