denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-pfkey: Support connection specific replay window sizes up to 32 packets

Browse Source
This commit is contained in:
Martin Willi
2014-06-17 16:41:30 +02:00
parent 44098fbaca
commit 823ce4a37f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+1 -1
View File
@@ -1677,7 +1677,7 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
} }
else else
{ {
sa->sadb_sa_replay = 32; sa->sadb_sa_replay = min(replay_window, 32);
sa->sadb_sa_auth = lookup_algorithm(INTEGRITY_ALGORITHM, int_alg); sa->sadb_sa_auth = lookup_algorithm(INTEGRITY_ALGORITHM, int_alg);
sa->sadb_sa_encrypt = lookup_algorithm(ENCRYPTION_ALGORITHM, enc_alg); sa->sadb_sa_encrypt = lookup_algorithm(ENCRYPTION_ALGORITHM, enc_alg);
} }