ikev2: add hint to the log when IDs do not match
Type: improvement
Ticket:
@@ -1666,7 +1666,11 @@ ikev2_sa_auth (ikev2_sa_t * sa)
sel_p = p;
break;
}
-
+ else
+ {
+ ikev2_elog_uint (IKEV2_LOG_ERROR, "shared key mismatch! ispi %lx",
+ sa->ispi);
+ }
}
else if (sa_auth->method == IKEV2_AUTH_METHOD_RSA_SIG)
{
@@ -1679,6 +1683,11 @@ ikev2_sa_auth (ikev2_sa_t * sa)
sel_p = p;
break;
}
+ else
+ {
+ ikev2_elog_uint (IKEV2_LOG_ERROR,
+ "cert verification failed! ispi %lx", sa->ispi);
+ }
}
vec_free(auth);
