Fix configuration of ASN1_DN IDs.
authorreyk <reyk@openbsd.org>
Mon, 24 Apr 2017 07:07:25 +0000 (07:07 +0000)
committerreyk <reyk@openbsd.org>
Mon, 24 Apr 2017 07:07:25 +0000 (07:07 +0000)
commit58c71edf26cfa1d162b0e9e0bcc64b370ff465d1
tree1ecacfdba66df746534d6e949640dbe72e18b6eb
parent2b2920da2fe110de9ec45ed0ffc604f7bc868ad3
Fix configuration of ASN1_DN IDs.

Public key authentication uses public key files that are stored in the
/etc/iked/pubkeys/ directory where the IKE IDs are encoded as filenames.
This does not simply work with ASN1_DNs where the IDs include slashes
and other special characters. Instead of breaking and failing when an
ASN1_DN is configured, simply skip the public key lookup but allow
to use it with certificates or PSKs.

Reported and fix tested by Igor V. Gubenko - Thanks.
sbin/iked/parse.y