moved force_encap to ike_config, enables responder to enforce udp encapsulation
[strongswan.git] / src / charon / control / interfaces / stroke_interface.c
index 13d4b96..f6935d5 100755 (executable)
@@ -522,7 +522,7 @@ static void stroke_add_conn(stroke_msg_t *msg, FILE *out)
        else
        {
                ike_cfg = ike_cfg_create(msg->add_conn.other.sendcert != CERT_NEVER_SEND,
-                                                                my_host, other_host);
+                                                                msg->add_conn.force_encap, my_host, other_host);
 
                if (msg->add_conn.algorithms.ike)
                {
@@ -572,8 +572,8 @@ static void stroke_add_conn(stroke_msg_t *msg, FILE *out)
                                        msg->add_conn.rekey.ike_lifetime - msg->add_conn.rekey.margin,
                                        msg->add_conn.rekey.margin * msg->add_conn.rekey.fuzz / 100, 
                                        msg->add_conn.rekey.reauth, msg->add_conn.mobike, 
-                                       msg->add_conn.force_encap, msg->add_conn.dpd.delay,
-                                       msg->add_conn.dpd.action, my_vip, other_vip);
+                                       msg->add_conn.dpd.delay, msg->add_conn.dpd.action,
+                                       my_vip, other_vip);
        }
        
        child_cfg = child_cfg_create(