On Wed, 28 Jul 2004 11:41:33 -0400 (EDT)
James Morris [off-list ref] wrote:

On Thu, 29 Jul 2004, Masahide Nakamura wrote:

quoted

When adding IPsec SA with PF_KEY (pfkey_add()),
xfrm_probe_algs() is called to make all algorithms valid.
However, it is missing to call it with netlink (xfrm_user) case and
it causes xfrm_aalg_get_byname() return NULL even if the name of
algorithm seems to be correct.

Looks ok, but odd that this has not been picked up before.

As discovered, this never got picked up before mostly
because the most popular user of xfrm_user (Openswan)
is still using PF_KEY to probe the algorithms.

Patch applied, arigato Masahide-san.