Package: racoon
Version: 0.3.3-1
Severity: normal
Tags: patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The "peers_identifier asn1dn" command in racoon-tool.conf allows a
string argument to be specified, but there are two things preventing
it from working:

1. It rejects "=" (equals) characters from the string, which is
   necessary for a valid ASN.1 identifier

2. It lowercases the whole string before writing it to racoon.conf,
   making the string invalid.  (I dont't see any point in lowercasing
   stuff so I just removed it.)

Patch for both problems follows.

/Teddy

- ----BEGIN PATCH
- --- /usr/sbin/racoon-tool.~1~ Fri Jun 18 11:28:25 2004
+++ /usr/sbin/racoon-tool       Mon Feb 21 12:41:51 2005
@@ -1322,7 +1322,7 @@
                                                                                
                                               
                 chomp;
 
- -                if (! m/^[-"{}()\[\]_;[EMAIL PROTECTED]:\/]+$/) {
+                if (! m/^[-"{}()\[\]_;[EMAIL PROTECTED]:\/=]+$/) {
                         prog_warn 0, "bad data in $conffile, line $line:";
                         prog_warn 0, $_;
                         # $barf = 1;
@@ -1458,7 +1458,6 @@
                                $peer_list{$peer}{'syntax_error'} = 1;
                                next LINE;
                        }
- -                     $value = value_lc($section, $property, $value);
                        $peer_list{$peer}{$property} = $value; 
                } elsif ( $section eq 'peer' ) {
                         prog_warn 0, "$peer - unrecognised tag in $conffile, 
line $line:";
- ----END PATCH

- -- System Information
Debian Release: 3.0
Architecture: sparc
Kernel: Linux flash 2.4.27 #1 Tue Jan 18 09:00:30 CET 2005 sparc64
Locale: LANG=C, LC_CTYPE=en_US.UTF-8

Versions of packages racoon depends on:
ii  debconf                       1.2.35     Debian configuration management sy
ii  ipsec-tools                   0.3.3-1    IPsec tools for Linux
ii  libc6                         2.2.5-11.8 GNU C Library: Shared libraries an

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQFCGc3iOWBmT5XqI90RAn0xAKDeyoBoe0IhVMjlThJ0/3dDpXu2YwCdH3yN
fA2vE49yAhZP3H5UTlz8m4g=
=y0LE
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to