From: Leon Romanovsky <leonro@nvidia.com>
Date: Mon, 21 Feb 2022 13:35:30 +0000 (+0200)
Subject: kernel-netlink: Remove unimplemented XFRM_OFFLOAD_IPV6 flag
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=012e4cd9021d8e812ed7f68ee47428ae53ba6072;p=people%2Fms%2Fstrongswan.git

kernel-netlink: Remove unimplemented XFRM_OFFLOAD_IPV6 flag

The XFRM_OFFLOAD_IPV6 flag was never implemented in the kernel and there
are no plans to do so.

Kernel patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c76ecd9c99b6e9a771d813ab1aa7fa428b3ade1

Closes strongswan/strongswan#916
---

diff --git a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
index 7a6d24b5f..339ce2a59 100644
--- a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
+++ b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
@@ -1497,10 +1497,6 @@ static bool config_hw_offload(kernel_ipsec_sa_id_t *id,
 		goto out;
 	}
 	offload->ifindex = if_nametoindex(ifname);
-	if (local->get_family(local) == AF_INET6)
-	{
-		offload->flags |= XFRM_OFFLOAD_IPV6;
-	}
 	offload->flags |= data->inbound ? XFRM_OFFLOAD_INBOUND : 0;
 
 	ret = TRUE;
@@ -2413,14 +2409,6 @@ METHOD(kernel_ipsec_t, update_sa, status_t,
 												  &ifname))
 				{
 					offload->ifindex = if_nametoindex(ifname);
-					if (local->get_family(local) == AF_INET6)
-					{
-						offload->flags |= XFRM_OFFLOAD_IPV6;
-					}
-					else
-					{
-						offload->flags &= ~XFRM_OFFLOAD_IPV6;
-					}
 					free(ifname);
 				}
 			}