diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2014-12-04 16:21:45 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2014-12-15 16:09:15 +0100 |
| commit | d21b01462eb2365e16c4c0a8d3de7f33424b3fb9 (patch) | |
| tree | a7f9d79b8a595737082cbc139a1b330bb59ea471 /src/libcharon/plugins/socket_default/socket_default_socket.c | |
| parent | ac0cb2d3635f5356b6de24a3f47951070c4287bc (diff) | |
| download | strongswan-d21b01462eb2365e16c4c0a8d3de7f33424b3fb9.tar.bz2 strongswan-d21b01462eb2365e16c4c0a8d3de7f33424b3fb9.tar.xz | |
kernel-pfkey: Fix replay window size on FreeBSD and Mac OS X
The FreeBSD and Mac OS X kernels interpret sadb_sa_replay as the size of the
replay window in bytes. Linux on the other hand does the same for PF_KEY it
does for XFRM so sadb_sa_replay denotes the number of packets/bits in the
window. Similarly, the window size on Linux is limited to 32 by the four
byte default bitmap used for IPsec SAs (may only be changed with
XFRMA_REPLAY_ESN_VAL), which is not the case on the other platforms.
Diffstat (limited to 'src/libcharon/plugins/socket_default/socket_default_socket.c')
0 files changed, 0 insertions, 0 deletions