CVS commit: src/crypto/dist/ipsec-tools/src/racoon

["Greg Troxel" <gdt%netbsd.org@localhost>]

Module Name:    src
Committed By:   gdt
Date:           Thu Dec 16 16:59:05 UTC 2010

Modified Files:
        src/crypto/dist/ipsec-tools/src/racoon: oakley.c

Log Message:
When encountering a certificate where "ID mismatched with ASN1
SubjectName", and verify_identifier is off, don't raise an error.
This makes the behavior match the man page.

Patch sent for review long ago:
  http://mail-index.netbsd.org/tech-security/2006/03/24/0000.html
with no negative feedback received to date.


To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 src/crypto/dist/ipsec-tools/src/racoon/oakley.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.