denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

charon-tkm: Store remote SPI in SAD

Browse Source 
Store the remote instead of the local SPI in the SAD when adding a new
entry in the kernel plugin's add_sa() function.

Since only one ESA context must be destroyed for an inbound/outbound
CHILD SA pair, it does not matter which SPI is used to retrieve it in
the del_sa function.
This commit is contained in:
Reto Buerki
2015-02-20 13:34:53 +01:00
committed by Martin Willi
parent fa4f66cba3
commit e1e854bd0c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon-tkm/src/tkm/tkm_kernel_ipsec.c
+1 -1
View File
@@ -136,7 +136,7 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
} }
esa_id = tkm->idmgr->acquire_id(tkm->idmgr, TKM_CTX_ESA); esa_id = tkm->idmgr->acquire_id(tkm->idmgr, TKM_CTX_ESA);
if (!tkm->sad->insert(tkm->sad, esa_id, peer, local, spi_loc, protocol)) if (!tkm->sad->insert(tkm->sad, esa_id, local, peer, spi_rem, protocol))
{ {
DBG1(DBG_KNL, "unable to add entry (%llu) to SAD", esa_id); DBG1(DBG_KNL, "unable to add entry (%llu) to SAD", esa_id);
goto sad_failure; goto sad_failure;