diff options
| author | David S. Miller <davem@sunset.davemloft.net> | 2005-12-20 01:23:23 +0300 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2005-12-20 01:23:23 +0300 |
| commit | 399c180ac5f0cb66ef9479358e0b8b6bafcbeafe (patch) | |
| tree | 4014154b7800e96058d94f78dc34a53681e8d5e5 /include/net | |
| parent | 9e999993c71e1506378d26d81f842277aff8a250 (diff) | |
| download | linux-399c180ac5f0cb66ef9479358e0b8b6bafcbeafe.tar.xz | |
[IPSEC]: Perform SA switchover immediately.
When we insert a new xfrm_state which potentially
subsumes an existing one, make sure all cached
bundles are flushed so that the new SA is used
immediately.
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/net')
| -rw-r--r-- | include/net/xfrm.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/net/xfrm.h b/include/net/xfrm.h index 5beae1ccd574..1cdb87912137 100644 --- a/include/net/xfrm.h +++ b/include/net/xfrm.h @@ -890,6 +890,7 @@ struct xfrm_state * xfrm_find_acq(u8 mode, u32 reqid, u8 proto, extern void xfrm_policy_flush(void); extern int xfrm_sk_policy_insert(struct sock *sk, int dir, struct xfrm_policy *pol); extern int xfrm_flush_bundles(void); +extern void xfrm_flush_all_bundles(void); extern int xfrm_bundle_ok(struct xfrm_dst *xdst, struct flowi *fl, int family); extern void xfrm_init_pmtu(struct dst_entry *dst); |