From: Martin Willi <martin@revosec.ch>
Date: Tue, 6 Nov 2012 10:33:29 +0000 (+0100)
Subject: Raise an alert if kernel policy installation fails
X-Git-Tag: 5.0.2dr4~45
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f285b9efc81e1d4a1c2e45676ab11f655c7a3bf2;p=thirdparty%2Fstrongswan.git

Raise an alert if kernel policy installation fails
---

diff --git a/src/libcharon/bus/bus.h b/src/libcharon/bus/bus.h
index 1a064c358d..94841f01aa 100644
--- a/src/libcharon/bus/bus.h
+++ b/src/libcharon/bus/bus.h
@@ -116,6 +116,8 @@ enum alert_t {
 	ALERT_TS_MISMATCH,
 	/** Installation of IPsec SAs failed, argument is child_sa_t */
 	ALERT_INSTALL_CHILD_SA_FAILED,
+	/** Installation of IPsec Policy failed, argument is child_sa_t */
+	ALERT_INSTALL_CHILD_POLICY_FAILED,
 	/** IKE_SA deleted because of "replace" unique policy, no argument */
 	ALERT_UNIQUE_REPLACE,
 	/** IKE_SA deleted because of "keep" unique policy, no arguement */
diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c
index ed2af43341..c59b4d646f 100644
--- a/src/libcharon/sa/ikev2/tasks/child_create.c
+++ b/src/libcharon/sa/ikev2/tasks/child_create.c
@@ -586,6 +586,8 @@ static status_t select_and_install(private_child_create_t *this,
 	if (status != SUCCESS)
 	{
 		DBG1(DBG_IKE, "unable to install IPsec policies (SPD) in kernel");
+		charon->bus->alert(charon->bus, ALERT_INSTALL_CHILD_POLICY_FAILED,
+						   this->child_sa);
 		return NOT_FOUND;
 	}