20a614fd64
When creating ipsec_policy with transform_protocol AH-ESP, ipsec_site_connection will always PENDING_CREATE, in vpn-agent log it raise an ERROR: 034 Must do at AH or ESP, not neither. Currently Openswan, Strongswan and Libreswan do not support AH-ESP. In this patch, add a validator in service driver for Openswan, Strongswan and Libreswan, that will raise an exception when creating or updating the IPSec Policy transform protocol with "ah-esp". Other vendors can bypass validate ipsec_policy when creating and updating transform protocol, or implement specific logic for themselves. DocImpact Change-Id: I0fde0c815adb61e6eb2bf868cf57e1286e0231fc Closes-Bug: #1488764 |
||
---|---|---|
.. | ||
__init__.py | ||
vpn_db.py | ||
vpn_models.py | ||
vpn_validator.py |