Re: [PATCH net-next] xfrm: Force SA to be lookup again if SA in acquire state
From: Steffen Klassert <steffen.klassert@secunet.com>
Date: 2013-09-26 09:03:12
On Mon, Sep 23, 2013 at 05:18:25PM +0800, Fan Du wrote:
If SA is in the process of acquiring, which indicates this SA is more promising and precise than the fall back option, i.e. using wild card source address for searching less suitable SA. So, here bail out, and try again. Signed-off-by: Fan Du <redacted>
This looks ok, I'll take this into ipsec-next as soon as I can update the tree.