diff options
| author | Andrey V. Elsukov <ae@FreeBSD.org> | 2015-05-19 08:37:03 +0000 |
|---|---|---|
| committer | Andrey V. Elsukov <ae@FreeBSD.org> | 2015-05-19 08:37:03 +0000 |
| commit | 5bae2b34a4dc18c983e377497bf5d3af2c12fe1a (patch) | |
| tree | df97e86c8f703e23967b5a8a96defaf435655870 /sys/netipsec/key.c | |
| parent | 664802113fe56647beeb09c858fa78711223dd06 (diff) | |
| download | src-5bae2b34a4dc18c983e377497bf5d3af2c12fe1a.tar.gz src-5bae2b34a4dc18c983e377497bf5d3af2c12fe1a.zip | |
Change SA's state before sending SADB_EXPIRE message. This state will
be reported to keying daemon.
MFC after: 2 weeks
Notes
Notes:
svn path=/head/; revision=283102
Diffstat (limited to 'sys/netipsec/key.c')
| -rw-r--r-- | sys/netipsec/key.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c index 24a16967317f..6eae0f57f570 100644 --- a/sys/netipsec/key.c +++ b/sys/netipsec/key.c @@ -4283,8 +4283,8 @@ key_flush_sad(time_t now) if (sav->lft_h->addtime != 0 && now - sav->created > sav->lft_h->addtime) { - key_expire(sav, 1); key_sa_chgstate(sav, SADB_SASTATE_DEAD); + key_expire(sav, 1); KEY_FREESAV(&sav); } #if 0 /* XXX Should we keep to send expire message until HARD lifetime ? */ @@ -4306,8 +4306,8 @@ key_flush_sad(time_t now) /* check HARD lifetime by bytes */ else if (sav->lft_h->bytes != 0 && sav->lft_h->bytes < sav->lft_c->bytes) { - key_expire(sav, 1); key_sa_chgstate(sav, SADB_SASTATE_DEAD); + key_expire(sav, 1); KEY_FREESAV(&sav); } } |