kernel-pfkey: Support connection specific replay window sizes up to 32 packets
This commit is contained in:
1 parent
44098fbaca
commit
823ce4a37f
1 file changed
+1
-1
@@ -1677,7 +1677,7 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
|
||||
}
|
||||
else
|
||||
{
|
||||
sa->sadb_sa_replay = 32;
|
||||
sa->sadb_sa_replay = min(replay_window, 32);
|
||||
sa->sadb_sa_auth = lookup_algorithm(INTEGRITY_ALGORITHM, int_alg);
|
||||
sa->sadb_sa_encrypt = lookup_algorithm(ENCRYPTION_ALGORITHM, enc_alg);
|
||||
}
|
||||
|
||||
Reference in new issue
Block a user