We makes sure that a dh group is required if the local proposal
authortobhe <tobhe@openbsd.org>
Mon, 15 Mar 2021 22:32:44 +0000 (22:32 +0000)
committertobhe <tobhe@openbsd.org>
Mon, 15 Mar 2021 22:32:44 +0000 (22:32 +0000)
commitcca7226094f020540dfe79ca61d67c0299276777
tree6f1009ac6b7b5da20cf39ddb1b723a42fbcc6085
parent59bdf5a3549778a2d542bb3fa3ec9df73c056a73
We makes sure that a dh group is required if the local proposal
contains an explicit group transform. Override requiredh if one
of the local options is 'none' so that a proposal with no DH
group and on with explicit group 'none' result in a match.

ok patrick@
sbin/iked/policy.c