denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode

Browse Source
This commit is contained in:
Andreas Steffen
2008-07-15 21:35:55 +00:00
parent de5f70e74d
commit 326bfd0450
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/kernel/kernel_interface.c
+4 -1
View File
@@ -2045,8 +2045,11 @@ static status_t add_sa(private_kernel_interface_t *this,
sa->id.proto = proto_ike2kernel(protocol); sa->id.proto = proto_ike2kernel(protocol);
sa->family = src->get_family(src); sa->family = src->get_family(src);
sa->mode = mode; sa->mode = mode;
if (mode == MODE_TUNNEL)
{
sa->flags |= XFRM_STATE_AF_UNSPEC;
}
sa->replay_window = (protocol == IPPROTO_COMP) ? 0 : 32; sa->replay_window = (protocol == IPPROTO_COMP) ? 0 : 32;
sa->flags |= XFRM_STATE_AF_UNSPEC;
sa->reqid = reqid; sa->reqid = reqid;
/* we currently do not expire SAs by volume/packet count */ /* we currently do not expire SAs by volume/packet count */
sa->lft.soft_byte_limit = XFRM_INF; sa->lft.soft_byte_limit = XFRM_INF;