denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

child-sa: Delete inbound SAs even if not installed to remove allocated SPIs

Browse Source 
If we can't establish an SA, this should delete the allocated SPI.
This commit is contained in:
Tobias Brunner
2020-10-30 13:08:16 +01:00
parent ef636316d2
commit bb87e63ca6
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/child_sa.c
+3 -2
View File
@@ -1706,8 +1706,9 @@ METHOD(child_sa_t, destroy, void,
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
} }
/* delete SAs in the kernel, if they are set up */ /* delete SAs in the kernel, if they are set up, inbound is always deleted
if (this->my_spi && this->inbound_installed) * to remove allocated SPIs */
if (this->my_spi)
{ {
kernel_ipsec_sa_id_t id = { kernel_ipsec_sa_id_t id = {
.src = this->other_addr, .src = this->other_addr,