From 8691632cf7f7b2beb9b2f7b717ae199f85ea854e Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Sat, 25 Jul 2015 19:41:31 -0500
Subject: Upgrade config to 11.9. Changes IPsec peer ID for EAP types to "any",
 to retain previous behavior.

Conflicts:
	etc/inc/upgrade_config.inc
---
 etc/inc/upgrade_config.inc | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'etc/inc')

diff --git a/etc/inc/upgrade_config.inc b/etc/inc/upgrade_config.inc
index eb32435..5838cac 100644
--- a/etc/inc/upgrade_config.inc
+++ b/etc/inc/upgrade_config.inc
@@ -3789,6 +3789,19 @@ function upgrade_117_to_118() {
 function upgrade_118_to_119() {
 	global $config;
 
+	// change peerid_type to 'any' for EAP types to retain previous behavior of omitting rightid
+	$a_phase1 =& $config['ipsec']['phase1'];
+
+	foreach ($a_phase1 as &$ph1_entry) {
+		if (strstr($ph1_entry['authentication_method'], 'eap')) {
+			$ph1_entry['peerid_type'] = "any";	
+		}
+	}
+}
+
+function upgrade_119_to_120() {
+	global $config;
+
 	if (!isset($config['installedpackages']['miniupnpd']['config'][0])) {
 		return;
 	}
-- 
cgit v1.1