matching_request instead of matching_trust must go into the metric
authorAndreas Steffen <andreas.steffen@strongswan.org>
Fri, 17 Aug 2007 07:21:26 +0000 (07:21 -0000)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Fri, 17 Aug 2007 07:21:26 +0000 (07:21 -0000)
src/pluto/connections.c

index 34764eb..f4c712e 100644 (file)
@@ -3352,7 +3352,7 @@ refine_host_connection(const struct state *st, const struct id *peer_id
                                        , d->spd.this.ca, &our_pathlen);
            bool match = matching_id && matching_auth && matching_trust;
 
-           int prio = (MAX_WILDCARDS + 1) * !matching_trust + wildcards;
+           int prio = (MAX_WILDCARDS + 1) * !matching_request + wildcards;
 
            prio = (MAX_CA_PATH_LEN + 1) * prio + peer_pathlen;
            prio = (MAX_CA_PATH_LEN + 1) * prio + our_pathlen;