Do not install routes for pluto.
There are some incompatibilities with e.g. passthrough policies. Pluto installs required source routes via updown script.
This commit is contained in:
parent
76467e030c
commit
b8bf01ddee
|
@ -2171,6 +2171,11 @@ kernel_netlink_ipsec_t *kernel_netlink_ipsec_create()
|
|||
hydra->daemon),
|
||||
);
|
||||
|
||||
if (streq(hydra->daemon, "pluto"))
|
||||
{ /* no routes for pluto, they are installed via updown script */
|
||||
this->install_routes = FALSE;
|
||||
}
|
||||
|
||||
/* disable lifetimes for allocated SPIs in kernel */
|
||||
fd = open("/proc/sys/net/core/xfrm_acq_expires", O_WRONLY);
|
||||
if (fd)
|
||||
|
|
|
@ -2137,6 +2137,11 @@ kernel_pfkey_ipsec_t *kernel_pfkey_ipsec_create()
|
|||
hydra->daemon),
|
||||
);
|
||||
|
||||
if (streq(hydra->daemon, "pluto"))
|
||||
{ /* no routes for pluto, they are installed via updown script */
|
||||
this->install_routes = FALSE;
|
||||
}
|
||||
|
||||
/* create a PF_KEY socket to communicate with the kernel */
|
||||
this->socket = socket(PF_KEY, SOCK_RAW, PF_KEY_V2);
|
||||
if (this->socket <= 0)
|
||||
|
|
Loading…
Reference in New Issue