diff options
| author |   bluhm <bluhm@openbsd.org> | 2009-01-30 14:24:52 +0000 |
|---|---|---|
| committer | bluhm <bluhm@openbsd.org> | 2009-01-30 14:24:52 +0000 |
| commit | f9f4a8a21be348b802cb0a88d1d3a13406e24423 (patch) | |
| tree | edfc854de5b64fe7d89cc3f756efa03a045f4032 /lib/libc | |
| parent | Set mbuf watermarks. (diff) | |
| download | wireguard-openbsd-f9f4a8a21be348b802cb0a88d1d3a13406e24423.tar.xz wireguard-openbsd-f9f4a8a21be348b802cb0a88d1d3a13406e24423.zip | |
If the "peer" address is not specified or derived from "to" for
"ike" rules in ipsec.conf, the default peer is used. In theory
ipsecctl -f ipsec.conf can configure the default peer for each "ike"
entry. As isakmpd only supports one default peer, the last "ike"
rule that uses a default peer wins. This configuration is then
significant for all "ike" rules that use the default peer.
Now a warning is printed if a later rule in ipsec.conf changes the
configuration of the original default peer. This should be an error
but that would break existing user configs. So only a warning is
printed.
ok hshoexer@, todd@
Diffstat (limited to 'lib/libc')
0 files changed, 0 insertions, 0 deletions