From 012e4cd9021d8e812ed7f68ee47428ae53ba6072 Mon Sep 17 00:00:00 2001 From: Leon Romanovsky Date: Mon, 21 Feb 2022 15:35:30 +0200 Subject: [PATCH] kernel-netlink: Remove unimplemented XFRM_OFFLOAD_IPV6 flag The XFRM_OFFLOAD_IPV6 flag was never implemented in the kernel and there are no plans to do so. Kernel patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c76ecd9c99b6e9a771d813ab1aa7fa428b3ade1 Closes strongswan/strongswan#916 --- .../plugins/kernel_netlink/kernel_netlink_ipsec.c | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c index 7a6d24b5f..339ce2a59 100644 --- a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c +++ b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c @@ -1497,10 +1497,6 @@ static bool config_hw_offload(kernel_ipsec_sa_id_t *id, goto out; } offload->ifindex = if_nametoindex(ifname); - if (local->get_family(local) == AF_INET6) - { - offload->flags |= XFRM_OFFLOAD_IPV6; - } offload->flags |= data->inbound ? XFRM_OFFLOAD_INBOUND : 0; ret = TRUE; @@ -2413,14 +2409,6 @@ METHOD(kernel_ipsec_t, update_sa, status_t, &ifname)) { offload->ifindex = if_nametoindex(ifname); - if (local->get_family(local) == AF_INET6) - { - offload->flags |= XFRM_OFFLOAD_IPV6; - } - else - { - offload->flags &= ~XFRM_OFFLOAD_IPV6; - } free(ifname); } } -- 2.47.3