From 54f818590e1482eb271b01e9f462c58ec1299242 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Tue, 23 Feb 2010 16:28:23 +0000 Subject: Pass sockets to bypass to kernel interface, allowing us to register them dynamically --- src/charon/plugins/kernel_klips/kernel_klips_ipsec.c | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'src/charon/plugins/kernel_klips/kernel_klips_ipsec.c') diff --git a/src/charon/plugins/kernel_klips/kernel_klips_ipsec.c b/src/charon/plugins/kernel_klips/kernel_klips_ipsec.c index 21f6b2ac9..c99b72133 100644 --- a/src/charon/plugins/kernel_klips/kernel_klips_ipsec.c +++ b/src/charon/plugins/kernel_klips/kernel_klips_ipsec.c @@ -2556,6 +2556,13 @@ static status_t register_pfkey_socket(private_kernel_klips_ipsec_t *this, u_int8 return SUCCESS; } +METHOD(kernel_ipsec_t, bypass_socket, bool, + private_kernel_klips_ipsec_t *this, int fd, int family) +{ + /* KLIPS does not need a bypass policy for IKE */ + return TRUE; +} + METHOD(kernel_ipsec_t, destroy, void, private_kernel_klips_ipsec_t *this) { @@ -2589,6 +2596,7 @@ kernel_klips_ipsec_t *kernel_klips_ipsec_create() .add_policy = _add_policy, .query_policy = _query_policy, .del_policy = _del_policy, + .bypass_socket = _bypass_socket, .destroy = _destroy, }, .policies = linked_list_create(), -- cgit v1.2.3