make authentication work with X509 certificates that don't have a
authormarkus <markus@openbsd.org>
Wed, 7 May 2014 12:57:13 +0000 (12:57 +0000)
committermarkus <markus@openbsd.org>
Wed, 7 May 2014 12:57:13 +0000 (12:57 +0000)
commit54977822e0a9194362fa7041c7e85a67e2ec0d11
treea7b6a2cb75e098473cb17b40163c97fa26db559f
parent397f03378fc76a3eb60bfbc4f7c4228abfad225a
make authentication work with X509 certificates that don't have a
subject-altname, i.e. support IKEV2_ID_ASN1_DN correctly;
feedback & ok mikeb@
sbin/iked/ca.c
sbin/iked/iked.h
sbin/iked/ikev2.c