Call Esa_Select after creation of child SA
This tells the TKM which child SA is the currently active SA.
This commit is contained in:
committed by
Tobias Brunner
parent
d2371b728c
commit
1c1400f007
@@ -169,6 +169,16 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
|
|||||||
}
|
}
|
||||||
tkm->idmgr->release_id(tkm->idmgr, TKM_CTX_NONCE, nonce_loc_id);
|
tkm->idmgr->release_id(tkm->idmgr, TKM_CTX_NONCE, nonce_loc_id);
|
||||||
}
|
}
|
||||||
|
if (ike_esa_select(esa_id) != TKM_OK)
|
||||||
|
{
|
||||||
|
DBG1(DBG_KNL, "error selecting new child SA (%llu)", esa_id);
|
||||||
|
if (ike_esa_reset(esa_id) != TKM_OK)
|
||||||
|
{
|
||||||
|
DBG1(DBG_KNL, "child SA (%llu) deletion failed", esa_id);
|
||||||
|
}
|
||||||
|
goto failure;
|
||||||
|
}
|
||||||
|
|
||||||
DBG1(DBG_KNL, "added child SA (esa: %llu, isa: %llu, esp_spi_loc: %x, "
|
DBG1(DBG_KNL, "added child SA (esa: %llu, isa: %llu, esp_spi_loc: %x, "
|
||||||
"esp_spi_rem: %x, role: %s)", esa_id, esa.isa_id, ntohl(spi_loc),
|
"esp_spi_rem: %x, role: %s)", esa_id, esa.isa_id, ntohl(spi_loc),
|
||||||
ntohl(spi_rem), initiator ? "initiator" : "responder");
|
ntohl(spi_rem), initiator ? "initiator" : "responder");
|
||||||
|
|||||||
Reference in New Issue
Block a user