[Ipsec-tools-devel] broken road warrior scenario for rsa signature authentication

[Martin H. <mh...@ba...>]

the reason is, that for "rsasig" authentication method the "phase1_up" script 
is not called.
that's prevented by the "switch (AUTHMETHOD(iph1))" clause in the methods

isakmp_cfg_request
isakmp_cfg_reply

in racoon/isakmp_cfg.c

so, my question: is there any particular reason for the whole switch clause?
why is "script_hook(iph1, SCRIPT_PHASE1_UP);" not called for all other 
authentication methods if ike config mode is enabled?

regards
martin huter


Barracuda Networks AG
Vorsitzender des Aufsichtsrates/ Chairman of the supervisory board: Dean Drako
Vorstand/ Executive Board: Dr. Wieland Alge, Mag. Guenter Klausner
Sitz der Gesellschaft/ Registered office: 6020 Innsbruck, Austria
Handelsgericht Innsbruck Firmenbuch/ Registration Number: 184392s
UID-Nr/ VAT Number: ATU47509003

Diese Nachricht und allfaellige angehaengte Dokumente sind vertraulich und nur fuer den/die Adressaten bestimmt. Sollten Sie nicht der beabsichtigte Adressat sein, ist jede Offenlegung, Weiterleitung oder sonstige Verwendung dieser Information nicht gestattet. In diesem Fall bitten wir, den Absender zu verstaendigen und die Information zu vernichten. Fuer Uebermittlungsfehler oder sonstige Irrtuemer bei Uebermittlung besteht keine Haftung.

This message and any attached files are confidential and intended solely for the addressee(s). Any publication, transmission or other use of the information by a person or entity other than the intended addressee is prohibited. If you receive this in error please contact the sender and delete the material. The sender does not accept liability for any errors or omissions as a result of the transmission.


'Like' us on Facebook for exclusive content and other resources on all Barracuda Networks solutions.
Visit http://barracudanetworks.com/facebook