child-cfg: Actually force narrowing TS in transport mode only as initiator

Closes strongswan/strongswan#2830

Fixes: ad1ad2159f ("child-cfg: Use traffic selector list")
This commit is contained in:
Tobias Brunner
2025-07-11 14:15:06 +02:00
parent 43b805b2da
commit bab415ec0a
+1 -1
View File
@@ -300,7 +300,7 @@ linked_list_t *child_cfg_select_ts(child_cfg_t *cfg, bool local,
/* force replacing non-dynamic TS to the IPs in transport mode, but only
* when proposing as initiator */
force = supplied && is_transport_mode(this);
force = !supplied && is_transport_mode(this);
result = ts->select(ts, supplied, hosts, force, &narrowed);
if (narrowed)