kernel-libipsec: Don't ignore policies of type != POLICY_IPSEC

This actually broke rekeying due to the DROP policies that are
temporarily added, which broke the refcount as the ignored policies
were not ignored in del_policy() (the type is not known there).

diff --git a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c
index 8458cd1cfe8a20e2ea4de4f73d2471a43ae46036..d0744e300a83ade799726dd20d7dce26b480b77d 100644 (file)
--- a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c
+++ b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c
@@ -523,11 +523,6 @@ METHOD(kernel_ipsec_t, add_policy, status_t,
        policy_entry_t *policy, *found = NULL;
        status_t status;
 
-       if (type != POLICY_IPSEC)
-       {
-               return SUCCESS;
-       }
-
        status = ipsec->policies->add_policy(ipsec->policies, src, dst, src_ts,
                                                                dst_ts, direction, type, sa, mark, priority);
        if (status != SUCCESS)