kernel-pfkey: Use interface to next hop for shunt policies

diff --git a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
index d54a96eb50d610bebc1e50aff8395f7384fdc83c..82abc76fae5b9ff67a31c195eaa383597b0f1a74 100644 (file)
--- a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+++ b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
@@ -2329,14 +2329,15 @@ static bool install_route(private_kernel_pfkey_ipsec_t *this,
        {       /* for shunt policies */
                route->gateway = charon->kernel->get_nexthop(charon->kernel,
                                                                                        policy->src.net, policy->src.mask,
-                                                                                       route->src_ip, NULL);
+                                                                                       route->src_ip, &route->if_name);
 
                /* we don't have a source address, use the address we found */
                src = route->src_ip;
        }
 
        /* get interface for route, using source address */
-       if (!charon->kernel->get_interface(charon->kernel, src, &route->if_name))
+       if (!route->if_name &&
+               !charon->kernel->get_interface(charon->kernel, src, &route->if_name))
        {
                route_entry_destroy(route);
                return FALSE;