From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 7 Feb 2022 13:35:39 +0000 (+0100)
Subject: child-sa: Enable ICMP forwarding on SA and policies if configured
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8d826ded3d63fe27e30e1d490baf6eaec77a08b2;p=thirdparty%2Fstrongswan.git

child-sa: Enable ICMP forwarding on SA and policies if configured
---

diff --git a/src/libcharon/sa/child_sa.c b/src/libcharon/sa/child_sa.c
index 9b06ebc3c3..6960763f50 100644
--- a/src/libcharon/sa/child_sa.c
+++ b/src/libcharon/sa/child_sa.c
@@ -919,6 +919,7 @@ static status_t install_internal(private_child_sa_t *this, chunk_t encr,
 		.copy_df = !this->config->has_option(this->config, OPT_NO_COPY_DF),
 		.copy_ecn = !this->config->has_option(this->config, OPT_NO_COPY_ECN),
 		.copy_dscp = this->config->get_copy_dscp(this->config),
+		.forward_icmp = this->config->has_option(this->config, OPT_FORWARD_ICMP),
 		.initiator = initiator,
 		.inbound = inbound,
 		.update = update,
@@ -968,6 +969,7 @@ static void prepare_sa_cfg(private_child_sa_t *this, ipsec_sa_cfg_t *my_sa,
 	*my_sa = (ipsec_sa_cfg_t){
 		.mode = this->mode,
 		.reqid = this->reqid,
+		.forward_icmp = this->config->has_option(this->config, OPT_FORWARD_ICMP),
 		.ipcomp = {
 			.transform = this->ipcomp,
 		},