kernel-pfkey: Use new encap flag on Mac OS X when updating SAs

diff --git a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
index 17878147bd71d0b081ae8c120dcc9b069515ef77..4a0c853fbf8eae70131b8992c749f11a761425bb 100644 (file)
--- a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+++ b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
@@ -1944,7 +1944,7 @@ METHOD(kernel_ipsec_t, update_sa, status_t,
                sa_2 = (struct sadb_sa_2*)PFKEY_EXT_ADD_NEXT(msg);
                sa_2->sa.sadb_sa_len = PFKEY_LEN(sizeof(struct sadb_sa_2));
                memcpy(&sa_2->sa, response.sa, sizeof(struct sadb_sa));
-               if (data->encap)
+               if (data->new_encap)
                {
                        sa_2->sadb_sa_natt_port = data->new_dst->get_port(data->new_dst);
                        sa_2->sa.sadb_sa_flags |= SADB_X_EXT_NATT;