From b8bf01ddee09faa020d65992d12b4be42be582bb Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 17 Aug 2010 09:48:59 +0200 Subject: Do not install routes for pluto. There are some incompatibilities with e.g. passthrough policies. Pluto installs required source routes via updown script. --- src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c') diff --git a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c index 25878addf..5b869e78b 100644 --- a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c +++ b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c @@ -2171,6 +2171,11 @@ kernel_netlink_ipsec_t *kernel_netlink_ipsec_create() hydra->daemon), ); + if (streq(hydra->daemon, "pluto")) + { /* no routes for pluto, they are installed via updown script */ + this->install_routes = FALSE; + } + /* disable lifetimes for allocated SPIs in kernel */ fd = open("/proc/sys/net/core/xfrm_acq_expires", O_WRONLY); if (fd) -- cgit v1.2.3