kernel-netlink: Don't require an interface name for passthrough policies

diff --git a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
index da22c0bbbaae03d70d9cdec614edce3a610da097..9d0c925c0117d85ee9f15cbe29c10a3742436d64 100644 (file)
--- a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
+++ b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
@@ -2661,8 +2661,9 @@ static void install_route(private_kernel_netlink_ipsec_t *this,
                        iface = route->src_ip;
                }
                if (!charon->kernel->get_interface(charon->kernel, iface,
-                                                                                  &route->if_name))
-               {
+                                                                                  &route->if_name) &&
+                       !route->pass)
+               {       /* don't require an interface for passthrough policies */
                        route_entry_destroy(route);
                        return;
                }

diff --git a/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c b/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c
index 24d93cc2f2917f0241adfe0c0b3193470f5394c1..e8e1f9ce84c29b9d2d918894be06ed056760aeb2 100644 (file)
--- a/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c
+++ b/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c
@@ -585,7 +585,7 @@ static job_requeue_t reinstall_routes(private_kernel_netlink_net_t *this)
                net_change_t *change, lookup = {
                        .if_name = route->if_name,
                };
-               if (route->pass)
+               if (route->pass || !route->if_name)
                {       /* no need to reinstall these, they don't reference interfaces */
                        continue;
                }