From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 7 Feb 2017 08:55:50 +0000 (+0100)
Subject: kernel-pfkey: Use new encap flag on Mac OS X when updating SAs
X-Git-Tag: 5.5.3~33
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a080cfece0c19cd73ce731b124d68a601b34867e;p=thirdparty%2Fstrongswan.git

kernel-pfkey: Use new encap flag on Mac OS X when updating SAs
---

diff --git a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
index 17878147bd..4a0c853fbf 100644
--- a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+++ b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
@@ -1944,7 +1944,7 @@ METHOD(kernel_ipsec_t, update_sa, status_t,
 		sa_2 = (struct sadb_sa_2*)PFKEY_EXT_ADD_NEXT(msg);
 		sa_2->sa.sadb_sa_len = PFKEY_LEN(sizeof(struct sadb_sa_2));
 		memcpy(&sa_2->sa, response.sa, sizeof(struct sadb_sa));
-		if (data->encap)
+		if (data->new_encap)
 		{
 			sa_2->sadb_sa_natt_port = data->new_dst->get_port(data->new_dst);
 			sa_2->sa.sadb_sa_flags |= SADB_X_EXT_NATT;