denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-pfkey: Only install templates for regular IPsec policies with reqid

Browse Source
This commit is contained in:
Tobias Brunner
2016-04-09 16:51:01 +02:00
committed by Andreas Steffen
parent 638b4638e3
commit 0ff8ce9452
1 changed files with 36 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+3
View File
@@ -2428,6 +2428,8 @@ static status_t add_policy_internal(private_kernel_pfkey_ipsec_t *this,
pol->sadb_x_policy_priority = mapping->priority; pol->sadb_x_policy_priority = mapping->priority;
#endif #endif
if (mapping->type == POLICY_IPSEC && ipsec->cfg.reqid)
{
/* one or more sadb_x_ipsecrequest extensions are added to the /* one or more sadb_x_ipsecrequest extensions are added to the
* sadb_x_policy extension */ * sadb_x_policy extension */
proto_mode = ipsec->cfg.mode; proto_mode = ipsec->cfg.mode;
@@ -2475,6 +2477,7 @@ static status_t add_policy_internal(private_kernel_pfkey_ipsec_t *this,
} }
pol->sadb_x_policy_len += PFKEY_LEN(req->sadb_x_ipsecrequest_len); pol->sadb_x_policy_len += PFKEY_LEN(req->sadb_x_ipsecrequest_len);
}
PFKEY_EXT_ADD(msg, pol); PFKEY_EXT_ADD(msg, pol);
add_addr_ext(msg, policy->src.net, SADB_EXT_ADDRESS_SRC, policy->src.proto, add_addr_ext(msg, policy->src.net, SADB_EXT_ADDRESS_SRC, policy->src.proto,