diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2008-07-15 21:35:55 +0000 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2008-07-15 21:35:55 +0000 |
| commit | 326bfd045071c21eae023c7dc40a1a4959c988e0 (patch) | |
| tree | 4da06e605a59f1577d95ed7d767b4e195483b6bb /src/charon/kernel/kernel_interface.c | |
| parent | de5f70e74d266aba30a83628f8f572791b9d7b64 (diff) | |
| download | strongswan-326bfd045071c21eae023c7dc40a1a4959c988e0.tar.bz2 strongswan-326bfd045071c21eae023c7dc40a1a4959c988e0.tar.xz | |
set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode
Diffstat (limited to 'src/charon/kernel/kernel_interface.c')
| -rw-r--r-- | src/charon/kernel/kernel_interface.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/charon/kernel/kernel_interface.c b/src/charon/kernel/kernel_interface.c index 7a83a1ef6..81d1e8b2e 100644 --- a/src/charon/kernel/kernel_interface.c +++ b/src/charon/kernel/kernel_interface.c @@ -2045,8 +2045,11 @@ static status_t add_sa(private_kernel_interface_t *this, sa->id.proto = proto_ike2kernel(protocol); sa->family = src->get_family(src); sa->mode = mode; + if (mode == MODE_TUNNEL) + { + sa->flags |= XFRM_STATE_AF_UNSPEC; + } sa->replay_window = (protocol == IPPROTO_COMP) ? 0 : 32; - sa->flags |= XFRM_STATE_AF_UNSPEC; sa->reqid = reqid; /* we currently do not expire SAs by volume/packet count */ sa->lft.soft_byte_limit = XFRM_INF; |