Fix bug in ipsec key rotation

- which would leave a stale state behind at each key rotation. Signed-off-by: Alessandro Boch <aboch@docker.com>
2016-07-25 16:23:53 -07:00 · 2016-07-25 16:23:53 -07:00 · bc6a60dae5
parent 88b76892f3
commit bc6a60dae5
1 changed files with 1 additions and 1 deletions
--- a/libnetwork/drivers/overlay/encryption.go
+++ b/libnetwork/drivers/overlay/encryption.go
@ -488,7 +488,7 @@ func updateNodeKey(lIP, rIP net.IP, idxs []*spi, curKeys []*key, newIdx, priIdx,

 	if delIdx != -1 {
 		// -rSA0
-		programSA(rIP, lIP, spis[delIdx], nil, reverse, false)
+		programSA(lIP, rIP, spis[delIdx], nil, reverse, false)
 	}

 	if newIdx > -1 {