denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

After IKEv1 reauthentication, reinstall VIP routes after migrating CHILD_SAs

Browse Source 
During IKEv1 reauthentication, the virtual IP gets removed, then reinstalled.
The CHILD_SAs get migrated, but any associated route gets removed from the
kernel. Reinstall routes after adding the virtual IP again.
This commit is contained in:
Martin Willi
2013-02-20 09:16:00 +01:00
parent f836d433a9
commit 3dc9d427c9
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_netlink/kernel_netlink_net.c
+4
View File
@@ -1757,6 +1757,10 @@ METHOD(kernel_net_t, add_ip, status_t,
DBG2(DBG_KNL, "virtual IP %H installed on %s", virtual_ip, DBG2(DBG_KNL, "virtual IP %H installed on %s", virtual_ip,
entry->iface->ifname); entry->iface->ifname);
this->lock->unlock(this->lock); this->lock->unlock(this->lock);
/* during IKEv1 reauthentication, children get moved from
* old the new SA before the virtual IP is available. This
* kills the route for our virtual IP, reinstall. */
queue_route_reinstall(this, entry->iface->ifname);
return SUCCESS; return SUCCESS;
} }
} }