[src/trunk]: src/crypto/dist/ipsec-tools/src/racoon From Roman Hoog Antink <r...

[tteras <tteras%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/a35199271e6c
branches:  trunk
changeset: 781242:a35199271e6c
user:      tteras <tteras%NetBSD.org@localhost>
date:      Wed Aug 29 11:34:37 2012 +0000

description:
>From Roman Hoog Antink <rha%open.ch@localhost>: add remote's IP address to the
"certificate not verified" error message.

diffstat:

 crypto/dist/ipsec-tools/src/racoon/oakley.c |  4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diffs (18 lines):

diff -r 5f154a7bdb2c -r a35199271e6c crypto/dist/ipsec-tools/src/racoon/oakley.c
--- a/crypto/dist/ipsec-tools/src/racoon/oakley.c       Wed Aug 29 11:24:11 2012 +0000
+++ b/crypto/dist/ipsec-tools/src/racoon/oakley.c       Wed Aug 29 11:34:37 2012 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: oakley.c,v 1.23 2012/08/29 11:24:11 tteras Exp $       */
+/*     $NetBSD: oakley.c,v 1.24 2012/08/29 11:34:37 tteras Exp $       */
 
 /* Id: oakley.c,v 1.32 2006/05/26 12:19:46 manubsd Exp */
 
@@ -1434,7 +1434,7 @@
                        }
 
                        if (error != 0) {
-                               plog(LLV_ERROR, LOCATION, NULL,
+                               plog(LLV_ERROR, LOCATION, iph1->remote,
                                     "the peer's certificate is not verified.\n");
                                return ISAKMP_NTYPE_INVALID_CERT_AUTHORITY;
                        }