The kernel-klips plugin does currently not support SAD/SPD flushing.

diff --git a/src/libhydra/plugins/kernel_klips/kernel_klips_ipsec.c b/src/libhydra/plugins/kernel_klips/kernel_klips_ipsec.c
index 25287aa777040a902c06b3a0c9236ae96a719e15..ceff8cdc9b5d9796e42243a61c78e7a19443bb39 100644 (file)
--- a/src/libhydra/plugins/kernel_klips/kernel_klips_ipsec.c
+++ b/src/libhydra/plugins/kernel_klips/kernel_klips_ipsec.c
@@ -2589,9 +2589,11 @@ kernel_klips_ipsec_t *kernel_klips_ipsec_create()
                                .update_sa = _update_sa,
                                .query_sa = _query_sa,
                                .del_sa = _del_sa,
+                               .flush_sas = (void*)return_failed,
                                .add_policy = _add_policy,
                                .query_policy = _query_policy,
                                .del_policy = _del_policy,
+                               .flush_policies = (void*)return_failed,
                                .bypass_socket = _bypass_socket,
                                .destroy = _destroy,
                        },