From: Herbert Xu Date: Sun, 19 Jun 2005 05:43:43 +0000 (-0700) Subject: [IPSEC] Fix xfrm to pfkey SA state conversion X-Git-Tag: v2.6.13-rc1~90^2~583^2~49 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4f09f0bbc1cb3c74e8f2047ad4be201a059829ee;p=pandora-kernel.git [IPSEC] Fix xfrm to pfkey SA state conversion This patch adjusts the SA state conversion in af_key such that XFRM_STATE_ERROR/XFRM_STATE_DEAD will be converted to SADB_STATE_DEAD instead of SADB_STATE_DYING. According to RFC 2367, SADB_STATE_DYING SAs can be turned into mature ones through updating their lifetime settings. Since SAs which are in the states XFRM_STATE_ERROR/XFRM_STATE_DEAD cannot be resurrected, this value is unsuitable. Signed-off-by: Herbert Xu --- Reading git-diff-tree failed