]> git.ipfire.org Git - thirdparty/strongswan.git/commit
kernel-netlink: Read protocol of acquire not from template
authorTobias Brunner <tobias@strongswan.org>
Fri, 28 May 2021 11:36:04 +0000 (13:36 +0200)
committerTobias Brunner <tobias@strongswan.org>
Thu, 14 Apr 2022 16:42:01 +0000 (18:42 +0200)
commit9983326b20ee18806668b589898d81e53d7f1a7c
tree3575c4efc44be3637ed0c90328ee478bfd6f1bd3
parent7f30e1aea2648478ee5823e90c9a6b5be4f27d1e
kernel-netlink: Read protocol of acquire not from template

If a policy with IPComp template triggers an acquire, we get two, one for
an IPComp, one for ESP/AH SA.  However, the triggering template of the trap
policy (where we get the reqid from), will be the same in both acquires,
IPComp, which we ignore, so no acquire was actually forwarded.
src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c