From 29b491ed9cfde5b4b67130926e71b1029aeb147a Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 15 Oct 2020 13:54:15 +0200 Subject: [PATCH] child-sa: No need to attempt to update policies if none are configured --- src/libcharon/sa/child_sa.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/libcharon/sa/child_sa.c b/src/libcharon/sa/child_sa.c index 2f61802f5e..d51f530dbf 100644 --- a/src/libcharon/sa/child_sa.c +++ b/src/libcharon/sa/child_sa.c @@ -1542,7 +1542,8 @@ METHOD(child_sa_t, update, status_t, OPT_PROXY_MODE); if (!this->config->has_option(this->config, OPT_NO_POLICIES) && - require_policy_update()) + require_policy_update() && array_count(this->my_ts) && + array_count(this->other_ts)) { ipsec_sa_cfg_t my_sa, other_sa; enumerator_t *enumerator; -- 2.47.3