denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow replay windows smaller than the default of 32

Browse Source
This commit is contained in:
Tobias Brunner
2012-09-27 12:43:39 +02:00
parent 9845391a95
commit a79af394a0
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
+6 -4
View File
@@ -322,12 +322,12 @@ struct private_kernel_netlink_ipsec_t {
bool policy_history; bool policy_history;
/** /**
* Size of the replay window, in packets * Size of the replay window, in packets (= bits)
*/ */
u_int32_t replay_window; u_int32_t replay_window;
/** /**
* Size of the replay window bitmap, in bytes * Size of the replay window bitmap, in number of __u32 blocks
*/ */
u_int32_t replay_bmp; u_int32_t replay_bmp;
}; };
@@ -1488,7 +1488,7 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
/* bmp_len contains number uf __u32's */ /* bmp_len contains number uf __u32's */
replay->bmp_len = this->replay_bmp; replay->bmp_len = this->replay_bmp;
replay->replay_window = this->replay_window; replay->replay_window = this->replay_window;
DBG2(DBG_KNL, " using replay window of %u bytes", DBG2(DBG_KNL, " using replay window of %u packets",
this->replay_window); this->replay_window);
rthdr = XFRM_RTA_NEXT(rthdr); rthdr = XFRM_RTA_NEXT(rthdr);
@@ -1500,7 +1500,9 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
} }
else else
{ {
sa->replay_window = DEFAULT_REPLAY_WINDOW; DBG2(DBG_KNL, " using replay window of %u packets",
this->replay_window);
sa->replay_window = this->replay_window;
} }
} }