| commit | 7833aa05b8db63484b43b4b4c389cd4533140afb | [log] [tgz] |
|---|---|---|
| author | Steffen Klassert <steffen.klassert@secunet.com> | Mon Apr 25 19:41:21 2011 +0000 |
| committer | David S. Miller <davem@davemloft.net> | Tue Apr 26 12:46:04 2011 -0700 |
| tree | 7540e5cef5c96e0a0bcef2baf5360511885ce3b2 | |
| parent | c0a56e64aec331f33ead29ba493ee184d9bdc840 [diff] |
xfrm: Check for the new replay implementation if an esn state is inserted IPsec extended sequence numbers can be used only with the new anti-replay window implementation. So check if the new implementation is used if an esn state is inserted and return an error if it is not. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net>