Consistently use peer label to ID peers when enforcing split horizon
authorJennifer Richards <jennifer@painless-security.com>
Sun, 29 Apr 2018 17:23:46 +0000 (13:23 -0400)
committerJennifer Richards <jennifer@painless-security.com>
Sun, 29 Apr 2018 17:23:46 +0000 (13:23 -0400)
commitb32a87b23bde95e7ac8592cc56873e4b6b60036b
tree6f1b3aca2f552ce63a2fa8eb85fafd051b3e4eec
parent74efd266be8e0672050401a890716cc089a2d609
Consistently use peer label to ID peers when enforcing split horizon

We were incorrectly comparing the peer label (which is "hostname:port")
with the GSS name of our route's source (i.e., "credential@apc.x") when
checking whether we were about to advertise a route back to the trust
router that announced it to us. That broke split horizon enforcement.
trp/trps.c