From 308fad517d81793373189a40daa20e06c510b937 Mon Sep 17 00:00:00 2001
From: Reyk Floeter <reyk@cvs.openbsd.org>
Date: Mon, 14 Jun 2010 23:23:53 +0000
Subject: check if cert is available and valid

---
 sbin/iked/ikev2_msg.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'sbin/iked')

diff --git a/sbin/iked/ikev2_msg.c b/sbin/iked/ikev2_msg.c
index 446d8a399a1..5fa774b7baa 100644
--- a/sbin/iked/ikev2_msg.c
+++ b/sbin/iked/ikev2_msg.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: ikev2_msg.c,v 1.5 2010/06/14 21:12:56 reyk Exp $	*/
+/*	$OpenBSD: ikev2_msg.c,v 1.6 2010/06/14 23:23:52 reyk Exp $	*/
 /*	$vantronix: ikev2.c,v 1.101 2010/06/03 07:57:33 reyk Exp $	*/
 
 /*
@@ -674,7 +674,7 @@ ikev2_msg_authverify(struct iked *env, struct iked_sa *sa,
 		keytype = 0;
 		break;
 	default:
-		if (id == NULL) {
+		if (!id->id_type || !ibuf_length(id->id_buf)) {
 			log_debug("%s: no cert found", __func__);
 			goto done;
 		}
-- 
cgit v1.2.3