[strongSwan-dev] [PATCH] Do not honor encapsulation flag for IPv6 connections

[Thomas Egerer]

Hello Martin, *,

we came to notice, that -- if for any reason -- a child_sa for IPv6 addresses
has the encap flag set, the kernel rejects the insertion of the state with
error code 22 (invalid argument). This is due to the fact that IPv6 does not
support NAT (yet?).
Please consider the little patch for upstream inclusion.

Cheers,

Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Do-not-honor-encapsulation-flag-for-IPv6-connections.patch
Type: text/x-patch
Size: 1593 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20100701/b9a5b0ea/attachment.bin>