]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
kernel-netlink: Remove unimplemented XFRM_OFFLOAD_IPV6 flag
authorLeon Romanovsky <leonro@nvidia.com>
Mon, 21 Feb 2022 13:35:30 +0000 (15:35 +0200)
committerTobias Brunner <tobias@strongswan.org>
Mon, 14 Mar 2022 14:48:21 +0000 (15:48 +0100)
The XFRM_OFFLOAD_IPV6 flag was never implemented in the kernel and there
are no plans to do so.

Kernel patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c76ecd9c99b6e9a771d813ab1aa7fa428b3ade1

Closes strongswan/strongswan#916

src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c

index 7a6d24b5ff25db3588a8768ff79a162786a4fa13..339ce2a59fa1f532c9a9c661eb30aa290909ecd8 100644 (file)
@@ -1497,10 +1497,6 @@ static bool config_hw_offload(kernel_ipsec_sa_id_t *id,
                goto out;
        }
        offload->ifindex = if_nametoindex(ifname);
-       if (local->get_family(local) == AF_INET6)
-       {
-               offload->flags |= XFRM_OFFLOAD_IPV6;
-       }
        offload->flags |= data->inbound ? XFRM_OFFLOAD_INBOUND : 0;
 
        ret = TRUE;
@@ -2413,14 +2409,6 @@ METHOD(kernel_ipsec_t, update_sa, status_t,
                                                                                                  &ifname))
                                {
                                        offload->ifindex = if_nametoindex(ifname);
-                                       if (local->get_family(local) == AF_INET6)
-                                       {
-                                               offload->flags |= XFRM_OFFLOAD_IPV6;
-                                       }
-                                       else
-                                       {
-                                               offload->flags &= ~XFRM_OFFLOAD_IPV6;
-                                       }
                                        free(ifname);
                                }
                        }