denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

android: Check the current path using DPD after a roaming event

Browse Source 
A new NAT mapping might be created even if the IP stays the same.  Due to
the DPD fallback with NAT keep-alives this might only be necessary in
corner cases, if at all.
This commit is contained in:
Tobias Brunner
2020-06-02 14:07:06 +02:00
parent 6524bd3cd5
commit 070cd12dfb
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/frontends/android/app/src/main/jni/libandroidbridge/charonservice.c
+2
View File
@@ -504,6 +504,8 @@ static void set_options(char *logfile)
"charon.initiator_only", TRUE); "charon.initiator_only", TRUE);
lib->settings->set_bool(lib->settings, lib->settings->set_bool(lib->settings,
"charon.close_ike_on_child_failure", TRUE); "charon.close_ike_on_child_failure", TRUE);
lib->settings->set_bool(lib->settings,
"charon.check_current_path", TRUE);
/* setting the source address breaks the VpnService.protect() function which /* setting the source address breaks the VpnService.protect() function which
* uses SO_BINDTODEVICE internally. the addresses provided to the kernel as * uses SO_BINDTODEVICE internally. the addresses provided to the kernel as
* auxiliary data have precedence over this option causing a routing loop if * auxiliary data have precedence over this option causing a routing loop if