d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Change SA's state before sending SADB_EXPIRE message. This state will

Browse Source 
be reported to keying daemon.

MFC after:	2 weeks
This commit is contained in:
ae 2015-05-19 08:37:03 +00:00
parent a7c61420ed
commit c2b339d225
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/netipsec/key.c
View File

@ -4283,8 +4283,8 @@ key_flush_sad(time_t now)
if (sav->lft_h->addtime != 0 &&
now - sav->created > sav->lft_h->addtime) {
key_expire(sav, 1);
key_sa_chgstate(sav, SADB_SASTATE_DEAD);
key_expire(sav, 1);
KEY_FREESAV(&sav);
}
#if 0 /* XXX Should we keep to send expire message until HARD lifetime ? */
@ -4306,8 +4306,8 @@ key_flush_sad(time_t now)
/* check HARD lifetime by bytes */
else if (sav->lft_h->bytes != 0 &&
sav->lft_h->bytes < sav->lft_c->bytes) {
key_expire(sav, 1);
key_sa_chgstate(sav, SADB_SASTATE_DEAD);
key_expire(sav, 1);
KEY_FREESAV(&sav);
}
}