denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

do not send all available kernel algorithms if esp string is faulty

Browse Source
This commit is contained in:
Andreas Steffen
2009-11-24 16:38:10 +01:00
parent 792876ff87
commit 2eeab939a0
1 changed files with 0 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pluto/kernel_alg.c
-28
View File
@@ -694,12 +694,6 @@ struct db_context* kernel_alg_db_new(struct alg_info_esp *alg_info,
/* pass aprox. number of transforms and attributes */ /* pass aprox. number of transforms and attributes */
ctx_new = db_prop_new(PROTO_IPSEC_ESP, trans_cnt, trans_cnt * 2); ctx_new = db_prop_new(PROTO_IPSEC_ESP, trans_cnt, trans_cnt * 2);
/*
* Loop: for each element (struct esp_info) of alg_info,
* if kernel support is present then build the transform (and attrs)
* if NULL alg_info, propose everything ...
*/
if (alg_info) if (alg_info)
{ {
int i; int i;
@@ -710,28 +704,6 @@ struct db_context* kernel_alg_db_new(struct alg_info_esp *alg_info,
kernel_alg_db_add(ctx_new, &tmp_esp_info, policy); kernel_alg_db_add(ctx_new, &tmp_esp_info, policy);
} }
} }
else
{
u_int ealg_id;
ESP_EALG_FOR_EACH_UPDOWN(ealg_id)
{
u_int aalg_id;
tmp_esp_info.esp_ealg_id = ealg_id;
tmp_esp_info.esp_ealg_keylen = 0;
for (aalg_id = 1; aalg_id <= SADB_AALG_MAX; aalg_id++)
{
if (ESP_AALG_PRESENT(aalg_id))
{
tmp_esp_info.esp_aalg_id = alg_info_esp_sadb2aa(aalg_id);
tmp_esp_info.esp_aalg_keylen = 0;
kernel_alg_db_add(ctx_new, &tmp_esp_info, policy);
}
}
}
}
prop = db_prop_get(ctx_new); prop = db_prop_get(ctx_new);
return ctx_new; return ctx_new;
} }