]> git.ipfire.org Git - people/ms/strongswan.git/commit
kernel-pfkey: Don't install exclude routes for locally connected peers
authorTobias Brunner <tobias@strongswan.org>
Wed, 16 Feb 2022 13:47:40 +0000 (14:47 +0100)
committerTobias Brunner <tobias@strongswan.org>
Tue, 15 Mar 2022 12:52:24 +0000 (13:52 +0100)
commit8a76c5af8a3c3dd5fd6d9dc301069a8bdae018ec
tree1fd32c0f593fc25f56e9122ec8582369620fd81e
parent5de6ab82a652716ea03882f6efce87c871bcdef1
kernel-pfkey: Don't install exclude routes for locally connected peers

Such routes with a gateway that equals the peer's address are problematic
on FreeBSD.  And since there is most likely a narrow route for the local
subnet anyway, the exclude routes would be redundant.
src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c