Do not install routes for pluto.
There are some incompatibilities with e.g. passthrough policies. Pluto installs required source routes via updown script.
This commit is contained in:
@@ -2171,6 +2171,11 @@ kernel_netlink_ipsec_t *kernel_netlink_ipsec_create()
|
|||||||
hydra->daemon),
|
hydra->daemon),
|
||||||
);
|
);
|
||||||
|
|
||||||
|
if (streq(hydra->daemon, "pluto"))
|
||||||
|
{ /* no routes for pluto, they are installed via updown script */
|
||||||
|
this->install_routes = FALSE;
|
||||||
|
}
|
||||||
|
|
||||||
/* disable lifetimes for allocated SPIs in kernel */
|
/* disable lifetimes for allocated SPIs in kernel */
|
||||||
fd = open("/proc/sys/net/core/xfrm_acq_expires", O_WRONLY);
|
fd = open("/proc/sys/net/core/xfrm_acq_expires", O_WRONLY);
|
||||||
if (fd)
|
if (fd)
|
||||||
|
|||||||
@@ -2137,6 +2137,11 @@ kernel_pfkey_ipsec_t *kernel_pfkey_ipsec_create()
|
|||||||
hydra->daemon),
|
hydra->daemon),
|
||||||
);
|
);
|
||||||
|
|
||||||
|
if (streq(hydra->daemon, "pluto"))
|
||||||
|
{ /* no routes for pluto, they are installed via updown script */
|
||||||
|
this->install_routes = FALSE;
|
||||||
|
}
|
||||||
|
|
||||||
/* create a PF_KEY socket to communicate with the kernel */
|
/* create a PF_KEY socket to communicate with the kernel */
|
||||||
this->socket = socket(PF_KEY, SOCK_RAW, PF_KEY_V2);
|
this->socket = socket(PF_KEY, SOCK_RAW, PF_KEY_V2);
|
||||||
if (this->socket <= 0)
|
if (this->socket <= 0)
|
||||||
|
|||||||
Reference in New Issue
Block a user