Commit 03bc5382 authored by Sebastien Decugis's avatar Sebastien Decugis

Add Inband-Security-Id AVP to CEA if the CER contains one even if it is the secure port

parent 644eb445
......@@ -950,6 +950,9 @@ int fd_p_ce_process_receiver(struct fd_peer * peer)
/* Do not send the ISI IPsec if we are using the new mechanism */
if ((isi == PI_SEC_NONE) && (! (peer->p_hdr.info.config.pic_flags.sec & PI_SEC_TLS_OLD)))
isi = 0;
} else if (peer->p_hdr.info.runtime.pir_isi & PI_SEC_TLS_OLD) {
/* Seem some weird peers are sending the Inband-Security-Id AVP on the secure port... No harm */
isi = PI_SEC_TLS_OLD;
}
/* Reply a CEA */
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment