Raise an alert if kernel policy installation fails

diff --git a/src/libcharon/bus/bus.h b/src/libcharon/bus/bus.h
index 1a064c358df22a61792cbf6e482bea91e4d30b81..94841f01aa3fdd710de91ee51681518789a0029e 100644 (file)
--- a/src/libcharon/bus/bus.h
+++ b/src/libcharon/bus/bus.h
@@ -116,6 +116,8 @@ enum alert_t {
        ALERT_TS_MISMATCH,
        /** Installation of IPsec SAs failed, argument is child_sa_t */
        ALERT_INSTALL_CHILD_SA_FAILED,
+       /** Installation of IPsec Policy failed, argument is child_sa_t */
+       ALERT_INSTALL_CHILD_POLICY_FAILED,
        /** IKE_SA deleted because of "replace" unique policy, no argument */
        ALERT_UNIQUE_REPLACE,
        /** IKE_SA deleted because of "keep" unique policy, no arguement */

diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c
index ed2af433418eac08edcc608f9fb9c300ee1643d3..c59b4d646f7eb1fba5ac0381aa9c6558250a2e55 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/child_create.c
+++ b/src/libcharon/sa/ikev2/tasks/child_create.c
@@ -586,6 +586,8 @@ static status_t select_and_install(private_child_create_t *this,
        if (status != SUCCESS)
        {
                DBG1(DBG_IKE, "unable to install IPsec policies (SPD) in kernel");
+               charon->bus->alert(charon->bus, ALERT_INSTALL_CHILD_POLICY_FAILED,
+                                                  this->child_sa);
                return NOT_FOUND;
        }