denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-netlink: Enable TFC padding only for tunnel mode ESP SAs

Browse Source 
The kernel does not allow them for transport mode SAs or IPComp SAs (and
of course not for AH SAs).

Fixes #446.
This commit is contained in:
Tobias Brunner
2013-11-19 12:44:16 +01:00
parent 194b69f0b8
commit 38a4f1964e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
+2 -2
View File
@@ -1459,8 +1459,8 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
goto failed; goto failed;
} }
if (tfc) if (tfc && protocol == IPPROTO_ESP && mode == MODE_TUNNEL)
{ { /* the kernel supports TFC padding only for tunnel mode ESP SAs */
u_int32_t *tfcpad; u_int32_t *tfcpad;
tfcpad = netlink_reserve(hdr, sizeof(request), XFRMA_TFCPAD, tfcpad = netlink_reserve(hdr, sizeof(request), XFRMA_TFCPAD,