From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 31 May 2021 13:26:27 +0000 (+0200)
Subject: ha: Ignore per-CPU CHILD_SAs
X-Git-Tag: 6.0.2dr1~5^2~21
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=297be45275617c548b0f986f1dbdd24c87c333dd;p=thirdparty%2Fstrongswan.git

ha: Ignore per-CPU CHILD_SAs

These only work on initiators (with trap policies), which is something
the plugin doesn't support.
---

diff --git a/src/libcharon/plugins/ha/ha_child.c b/src/libcharon/plugins/ha/ha_child.c
index 9d8fca9eb4..ee33850049 100644
--- a/src/libcharon/plugins/ha/ha_child.c
+++ b/src/libcharon/plugins/ha/ha_child.c
@@ -66,6 +66,10 @@ METHOD(listener_t, child_keys, bool,
 	{	/* do not sync SA between nodes */
 		return TRUE;
 	}
+	if (child_sa->use_per_cpu(child_sa))
+	{	/* ignore per-CPU SAs */
+		return TRUE;
+	}
 
 	m = ha_message_create(HA_CHILD_ADD);
 
@@ -167,7 +171,10 @@ METHOD(listener_t, child_state_change, bool,
 	{	/* do not sync SA between nodes */
 		return TRUE;
 	}
-
+	if (child_sa->use_per_cpu(child_sa))
+	{	/* ignore per-CPU SAs */
+		return TRUE;
+	}
 
 	if (state == CHILD_DESTROYING)
 	{