aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFilip Tehlar <ftehlar@cisco.com>2021-01-26 22:06:48 +0000
committerBeno�t Ganne <bganne@cisco.com>2021-02-04 18:12:13 +0000
commitbdd14fc2a3b438fe424257d707a69555b008fb04 (patch)
tree5459f37d72291abc268fc39d2756d3078dd76951
parenta0951d4b3b2b13abf20d72fde02baed844a6b014 (diff)
ikev2: add hint to the log when IDs do not match
Type: improvement Ticket: VPP-1908 Change-Id: I1d86ea18fcb6174b86c449d5d9403fd0e5715318 Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
-rw-r--r--src/plugins/ikev2/ikev2.c11
1 files changed, 10 insertions, 1 deletions
diff --git a/src/plugins/ikev2/ikev2.c b/src/plugins/ikev2/ikev2.c
index 8bb327730c8..0236764e637 100644
--- a/src/plugins/ikev2/ikev2.c
+++ b/src/plugins/ikev2/ikev2.c
@@ -1666,7 +1666,11 @@ ikev2_sa_auth (ikev2_sa_t * sa)
sel_p = p;
break;
}
-
+ else
+ {
+ ikev2_elog_uint (IKEV2_LOG_ERROR, "shared key mismatch! ispi %lx",
+ sa->ispi);
+ }
}
else if (sa_auth->method == IKEV2_AUTH_METHOD_RSA_SIG)
{
@@ -1679,6 +1683,11 @@ ikev2_sa_auth (ikev2_sa_t * sa)
sel_p = p;
break;
}
+ else
+ {
+ ikev2_elog_uint (IKEV2_LOG_ERROR,
+ "cert verification failed! ispi %lx", sa->ispi);
+ }
}
vec_free(auth);