]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
android: Announce support for TFC padding
authorTobias Brunner <tobias@strongswan.org>
Thu, 23 Jun 2022 14:38:02 +0000 (16:38 +0200)
committerTobias Brunner <tobias@strongswan.org>
Wed, 22 Feb 2023 12:20:10 +0000 (13:20 +0100)
Has been supported by libipsec for a long time (since 5.1.1).  UDP encap
is already enforced via config, this just makes the flags the same as
in kernel-libipsec.

src/frontends/android/app/src/main/jni/libandroidbridge/kernel/android_ipsec.c

index 1a47f6d8d72900ae7a8531137d7c025042488ad7..7af027e751d75deffec471b14e283017399742ae 100644 (file)
@@ -49,7 +49,8 @@ static void expire(uint8_t protocol, uint32_t spi, host_t *dst, bool hard)
 METHOD(kernel_ipsec_t, get_features, kernel_feature_t,
        private_kernel_android_ipsec_t *this)
 {
-       return KERNEL_SA_USE_TIME;
+       return KERNEL_REQUIRE_UDP_ENCAPSULATION | KERNEL_ESP_V3_TFC |
+                  KERNEL_SA_USE_TIME;
 }
 
 METHOD(kernel_ipsec_t, get_spi, status_t,