diff options
author | Tobias Brunner <tobias@strongswan.org> | 2017-07-11 13:49:21 +0200 |
---|---|---|
committer | Tobias Brunner <tobias@strongswan.org> | 2017-08-07 10:44:05 +0200 |
commit | 0d42a762759c80748a003da46a99970b860535f9 (patch) | |
tree | 5afaf0d8ab8fea42b3df773b74a561b7a2703adc /src/charon-tkm | |
parent | a146b4c9efa46c537d04b5089a54f10dc106e14a (diff) | |
download | strongswan-0d42a762759c80748a003da46a99970b860535f9.tar.bz2 strongswan-0d42a762759c80748a003da46a99970b860535f9.tar.xz |
charon-tkm: Claim to support SPIs on policies
This fixes rekeying as the delayed installation of the outbound SA
caused the nonce context to be expired already.
Diffstat (limited to 'src/charon-tkm')
-rw-r--r-- | src/charon-tkm/src/tkm/tkm_kernel_ipsec.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/charon-tkm/src/tkm/tkm_kernel_ipsec.c b/src/charon-tkm/src/tkm/tkm_kernel_ipsec.c index c9be8989a..9229c3d67 100644 --- a/src/charon-tkm/src/tkm/tkm_kernel_ipsec.c +++ b/src/charon-tkm/src/tkm/tkm_kernel_ipsec.c @@ -52,6 +52,12 @@ struct private_tkm_kernel_ipsec_t { }; +METHOD(kernel_ipsec_t, get_features, kernel_feature_t, + private_tkm_kernel_ipsec_t *this) +{ + return KERNEL_POLICY_SPI; +} + METHOD(kernel_ipsec_t, get_spi, status_t, private_tkm_kernel_ipsec_t *this, host_t *src, host_t *dst, uint8_t protocol, uint32_t *spi) @@ -358,6 +364,7 @@ tkm_kernel_ipsec_t *tkm_kernel_ipsec_create() INIT(this, .public = { .interface = { + .get_features = _get_features, .get_spi = _get_spi, .get_cpi = _get_cpi, .add_sa = _add_sa, |