diff options
author | Herbert Xu <herbert@gondor.apana.org.au> | 2005-06-18 22:43:43 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2005-06-18 22:43:43 -0700 |
commit | 4f09f0bbc1cb3c74e8f2047ad4be201a059829ee (patch) | |
tree | d5ceba89f401b073cea383fa245c2b6299b7d07e /include/net/xfrm.h | |
parent | 4666faab095230ec8aa62da6c33391287f281154 (diff) | |
download | kernel_samsung_smdk4412-4f09f0bbc1cb3c74e8f2047ad4be201a059829ee.zip kernel_samsung_smdk4412-4f09f0bbc1cb3c74e8f2047ad4be201a059829ee.tar.gz kernel_samsung_smdk4412-4f09f0bbc1cb3c74e8f2047ad4be201a059829ee.tar.bz2 |
[IPSEC] Fix xfrm to pfkey SA state conversion
This patch adjusts the SA state conversion in af_key such that
XFRM_STATE_ERROR/XFRM_STATE_DEAD will be converted to SADB_STATE_DEAD
instead of SADB_STATE_DYING.
According to RFC 2367, SADB_STATE_DYING SAs can be turned into
mature ones through updating their lifetime settings. Since SAs
which are in the states XFRM_STATE_ERROR/XFRM_STATE_DEAD cannot
be resurrected, this value is unsuitable.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'include/net/xfrm.h')
0 files changed, 0 insertions, 0 deletions