diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2013-10-10 15:41:29 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2013-10-11 15:32:44 +0200 |
| commit | cd25d291f7fce92d1fe21f86c798bcb77f84b2f6 (patch) | |
| tree | 432f90f9526f30af0df15963490ccebc2836f283 /src/libcharon/plugins/kernel_libipsec | |
| parent | eeb34af06936a7de2c66fd2149d9fb55a7ddb6b1 (diff) | |
| download | strongswan-cd25d291f7fce92d1fe21f86c798bcb77f84b2f6.tar.bz2 strongswan-cd25d291f7fce92d1fe21f86c798bcb77f84b2f6.tar.xz | |
kernel-libipsec: Don't ignore policies of type != POLICY_IPSEC
This actually broke rekeying due to the DROP policies that are
temporarily added, which broke the refcount as the ignored policies
were not ignored in del_policy() (the type is not known there).
Diffstat (limited to 'src/libcharon/plugins/kernel_libipsec')
| -rw-r--r-- | src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c index 8458cd1cf..d0744e300 100644 --- a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c +++ b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c @@ -523,11 +523,6 @@ METHOD(kernel_ipsec_t, add_policy, status_t, policy_entry_t *policy, *found = NULL; status_t status; - if (type != POLICY_IPSEC) - { - return SUCCESS; - } - status = ipsec->policies->add_policy(ipsec->policies, src, dst, src_ts, dst_ts, direction, type, sa, mark, priority); if (status != SUCCESS) |