From bdd14fc2a3b438fe424257d707a69555b008fb04 Mon Sep 17 00:00:00 2001 From: Filip Tehlar Date: Tue, 26 Jan 2021 22:06:48 +0000 Subject: ikev2: add hint to the log when IDs do not match Type: improvement Ticket: VPP-1908 Change-Id: I1d86ea18fcb6174b86c449d5d9403fd0e5715318 Signed-off-by: Filip Tehlar --- src/plugins/ikev2/ikev2.c | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) (limited to 'src/plugins') diff --git a/src/plugins/ikev2/ikev2.c b/src/plugins/ikev2/ikev2.c index 8bb327730c8..0236764e637 100644 --- a/src/plugins/ikev2/ikev2.c +++ b/src/plugins/ikev2/ikev2.c @@ -1666,7 +1666,11 @@ ikev2_sa_auth (ikev2_sa_t * sa) sel_p = p; break; } - + else + { + ikev2_elog_uint (IKEV2_LOG_ERROR, "shared key mismatch! ispi %lx", + sa->ispi); + } } else if (sa_auth->method == IKEV2_AUTH_METHOD_RSA_SIG) { @@ -1679,6 +1683,11 @@ ikev2_sa_auth (ikev2_sa_t * sa) sel_p = p; break; } + else + { + ikev2_elog_uint (IKEV2_LOG_ERROR, + "cert verification failed! ispi %lx", sa->ispi); + } } vec_free(auth); -- cgit 1.2.3-korg