iv_gen: Provide external sequence number (IKE, ESP)

This prevents duplicate sequential IVs in case of a HA failover.
This commit is contained in:
Tobias Brunner
2013-10-11 15:55:40 +02:00
parent d74c254dfd
commit e8229ad558
7 changed files with 18 additions and 23 deletions
+1 -1
View File
@@ -319,7 +319,7 @@ METHOD(esp_packet_t, encrypt, status_t,
writer->write_uint32(writer, next_seqno);
iv = writer->skip(writer, iv.len);
if (!iv_gen->get_iv(iv_gen, iv.len, iv.ptr))
if (!iv_gen->get_iv(iv_gen, next_seqno, iv.len, iv.ptr))
{
DBG1(DBG_ESP, "ESP encryption failed: could not generate IV");
writer->destroy(writer);