diff options
| author | Martin Willi <martin@revosec.ch> | 2013-12-24 11:27:59 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2014-06-04 16:32:11 +0200 |
| commit | 4b09bd6c29e5619375c4d023484d84f4f7d6bc8b (patch) | |
| tree | 352b632975617faf5861ca0619214aed1f239e9c /src | |
| parent | 5e6e214ab41000b3eb89ab08b1bc09364ea39408 (diff) | |
| download | strongswan-4b09bd6c29e5619375c4d023484d84f4f7d6bc8b.tar.bz2 strongswan-4b09bd6c29e5619375c4d023484d84f4f7d6bc8b.tar.xz | |
child-sa: Pass the number of total policies tied to an SA to the kernel
This will be useful if the kernel backend has to know how many policies
follow an SA install, for example if it must install all policies concurrently.
Diffstat (limited to 'src')
| -rw-r--r-- | src/libcharon/sa/child_sa.c | 8 | ||||
| -rw-r--r-- | src/libstrongswan/ipsec/ipsec_types.h | 2 |
2 files changed, 10 insertions, 0 deletions
diff --git a/src/libcharon/sa/child_sa.c b/src/libcharon/sa/child_sa.c index bbf6259c2..a7d7b7305 100644 --- a/src/libcharon/sa/child_sa.c +++ b/src/libcharon/sa/child_sa.c @@ -847,6 +847,14 @@ METHOD(child_sa_t, add_policies, status_t, priority = this->trap ? POLICY_PRIORITY_ROUTED : POLICY_PRIORITY_DEFAULT; + enumerator = create_policy_enumerator(this); + while (enumerator->enumerate(enumerator, &my_ts, &other_ts)) + { + my_sa.policy_count++; + other_sa.policy_count++; + } + enumerator->destroy(enumerator); + /* enumerate pairs of traffic selectors */ enumerator = create_policy_enumerator(this); while (enumerator->enumerate(enumerator, &my_ts, &other_ts)) diff --git a/src/libstrongswan/ipsec/ipsec_types.h b/src/libstrongswan/ipsec/ipsec_types.h index 6851f916a..1a4656b04 100644 --- a/src/libstrongswan/ipsec/ipsec_types.h +++ b/src/libstrongswan/ipsec/ipsec_types.h @@ -122,6 +122,8 @@ struct ipsec_sa_cfg_t { ipsec_mode_t mode; /** unique ID */ u_int32_t reqid; + /** number of policies of the same kind (in/out/fwd) attached to SA */ + u_int32_t policy_count; /** details about ESP/AH */ struct { /** TRUE if this protocol is used */ |