diff options
| author | Martin Willi <martin@revosec.ch> | 2014-06-18 16:50:18 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2014-06-18 16:54:19 +0200 |
| commit | 758dc8a953639d7522b31004d2261ed04b474d7a (patch) | |
| tree | cef565d66c4c6b34929e3991fc1fe368e646b83b /src/libcharon/plugins/sql | |
| parent | 8b9b11919d92e9738bb52901c9dbcc72e35b9fed (diff) | |
| download | strongswan-758dc8a953639d7522b31004d2261ed04b474d7a.tar.bz2 strongswan-758dc8a953639d7522b31004d2261ed04b474d7a.tar.xz | |
child-sa: Set replay window on both inbound and outbound SA
While the outbound SA actually does not need a replay window, the kernel rejects
zero replay windows on SAs using ESN. The ESN flag is required to use the full
sequence number in ICV calculation, hence we set the replay window.
This restores the behavior we had before 30c009c2.
Diffstat (limited to 'src/libcharon/plugins/sql')
0 files changed, 0 insertions, 0 deletions