From 297be45275617c548b0f986f1dbdd24c87c333dd Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 31 May 2021 15:26:27 +0200 Subject: [PATCH] ha: Ignore per-CPU CHILD_SAs These only work on initiators (with trap policies), which is something the plugin doesn't support. --- src/libcharon/plugins/ha/ha_child.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/libcharon/plugins/ha/ha_child.c b/src/libcharon/plugins/ha/ha_child.c index 9d8fca9eb..ee3385004 100644 --- a/src/libcharon/plugins/ha/ha_child.c +++ b/src/libcharon/plugins/ha/ha_child.c @@ -66,6 +66,10 @@ METHOD(listener_t, child_keys, bool, { /* do not sync SA between nodes */ return TRUE; } + if (child_sa->use_per_cpu(child_sa)) + { /* ignore per-CPU SAs */ + return TRUE; + } m = ha_message_create(HA_CHILD_ADD); @@ -167,7 +171,10 @@ METHOD(listener_t, child_state_change, bool, { /* do not sync SA between nodes */ return TRUE; } - + if (child_sa->use_per_cpu(child_sa)) + { /* ignore per-CPU SAs */ + return TRUE; + } if (state == CHILD_DESTROYING) {