updown: Don't call the script for per-CPU SAs

Rules are installed for the fallback SA that has no CPU ID assigned.

diff --git a/src/libcharon/plugins/updown/updown_listener.c b/src/libcharon/plugins/updown/updown_listener.c
index f4ab964e998fe039bf1417e0e981fbbe8367b3a7..a62184a268a3b42217c531a083fff3f997e89761 100644 (file)
--- a/src/libcharon/plugins/updown/updown_listener.c
+++ b/src/libcharon/plugins/updown/updown_listener.c
@@ -435,6 +435,11 @@ METHOD(listener_t, child_updown, bool,
        enumerator_t *enumerator;
        child_cfg_t *config;
 
+       if (child_sa->get_cpu(child_sa) != CPU_ID_MAX)
+       {       /* don't call the script for per-CPU SAs */
+               return TRUE;
+       }
+
        config = child_sa->get_config(child_sa);
        if (config->get_updown(config))
        {