From 761e55184cb1d470bc4c195f8bfbefccafbedec0 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Wed, 28 Apr 2021 09:25:04 +0200
Subject: [PATCH] IPSec: prepend fqdn when selected, related to
 https://github.com/opnsense/core/issues/4860

---
 src/etc/inc/plugins.inc.d/ipsec.inc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/etc/inc/plugins.inc.d/ipsec.inc b/src/etc/inc/plugins.inc.d/ipsec.inc
index b607569d8..4d3b0dc97 100644
--- a/src/etc/inc/plugins.inc.d/ipsec.inc
+++ b/src/etc/inc/plugins.inc.d/ipsec.inc
@@ -814,6 +814,9 @@ function ipsec_find_id(&$ph1ent, $side = 'local')
         case "peeraddress":
             $thisid_data = ipsec_resolve($ph1ent['remote-gateway']);
             break;
+        case "fqdn":
+            $thisid_data = !empty($id_data) ? "fqdn:{$id_data}" : null;
+            break;
         case "keyid tag":
             $thisid_data = !empty($id_data) ? "keyid:{$id_data}" : null;
             break;