Blame SOURCES/libreswan-3.23-zerolengthkey.patch

5b9a3d
diff -Naur libreswan-3.25-orig/programs/pluto/ikev1_spdb_struct.c libreswan-3.25/programs/pluto/ikev1_spdb_struct.c
5b9a3d
--- libreswan-3.25-orig/programs/pluto/ikev1_spdb_struct.c	2018-06-27 22:42:26.000000000 +0700
5b9a3d
+++ libreswan-3.25/programs/pluto/ikev1_spdb_struct.c	2018-11-22 20:29:34.034626926 +0700
5b9a3d
@@ -1053,10 +1053,11 @@
5b9a3d
 				loglog(RC_LOG_SERIOUS,
5b9a3d
 				       "You should NOT use insecure/broken IKE algorithms (%s)!",
5b9a3d
 				       ta->ta_encrypt->common.fqn);
5b9a3d
+			} else {
5b9a3d
+				DBG(DBG_CONTROL,
5b9a3d
+					DBG_log("OAKLEY proposal verified; matching alg_info found"));
5b9a3d
+				return true;
5b9a3d
 			}
5b9a3d
-			DBG(DBG_CONTROL,
5b9a3d
-			    DBG_log("OAKLEY proposal verified; matching alg_info found"));
5b9a3d
-			return true;
5b9a3d
 		}
5b9a3d
 	}
5b9a3d
 	libreswan_log("Oakley Transform [%s (%d), %s, %s] refused%s",