Hello, Do you known why exactly it is rejected? Maybe another simple way would be to set the default replay window on outbound SA?
Emeric ----- Original Message ----- From: "Tobias Brunner" <[email protected]> To: [email protected] Sent: Friday, 17 June, 2016 15:50:18 Subject: Re: [strongSwan-dev] Patch proposal: set the replay window only on inbound SA Hi Emeric, > Seems like [1] would fix this for all kernel > backends that don't know if an SA is inbound or not equally. It's actually problematic on Linux if extended sequence numbers are used. The kernel rejects the SA if the window is 0 in that case. So I guess it's easier to disable the replay window for outbound SAs in the individual kernel plugins. Regards, Tobias _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
