Commit b836267a authored Dec 28, 2006 by Martin Willi Committed by David S. Miller Dec 31, 2006

[XFRM]: Algorithm lookup using .compat name



Installing an IPsec SA using old algorithm names (.compat) does not work
if the algorithm is not already loaded. When not using the PF_KEY
interface, algorithms are not preloaded in xfrm_probe_algs() and
installing a IPsec SA fails.

Signed-off-by: Martin Willi <martin@strongswan.org>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent cb4db4c2

net/xfrm/xfrm_algo.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -399,7 +399,8 @@ static struct xfrm_algo_desc xfrm_get_byname(struct xfrm_algo_desc list,
		if (!probe)
		break;

		status = crypto_has_alg(name, type, mask \| CRYPTO_ALG_ASYNC);
		status = crypto_has_alg(list[i].name, type,
		mask \| CRYPTO_ALG_ASYNC);
		if (!status)
		break;

Admin message