From: Neale Ranns <nranns@cisco.com>
Date: Fri, 14 Jun 2019 10:31:46 +0000 (+0000)
Subject: ipsec: return original SA create error for tunnel create
X-Git-Tag: v20.01-rc0~400
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F31%2F20131%2F2;p=vpp.git

ipsec: return original SA create error for tunnel create

rather than SRC/DST address error which is not so helpfull

Type: fix
Fixes: af3f0783

Change-Id: Ie2143e4e29de87d93e79bd96284c041bdbffd98e
Signed-off-by: Neale Ranns <nranns@cisco.com>
---

diff --git a/src/vnet/ipsec/ipsec_if.c b/src/vnet/ipsec/ipsec_if.c
index 8e0fba28bad..6627d295f1e 100644
--- a/src/vnet/ipsec/ipsec_if.c
+++ b/src/vnet/ipsec/ipsec_if.c
@@ -335,7 +335,7 @@ ipsec_add_del_tunnel_if_internal (vnet_main_t * vnm,
 			 &args->local_ip, &t->input_sa_index);
 
       if (rv)
-	return VNET_API_ERROR_INVALID_SRC_ADDRESS;
+	return rv;
 
       ipsec_mk_key (&crypto_key,
 		    args->local_crypto_key, args->local_crypto_key_len);
@@ -356,7 +356,7 @@ ipsec_add_del_tunnel_if_internal (vnet_main_t * vnm,
 			 &args->remote_ip, &t->output_sa_index);
 
       if (rv)
-	return VNET_API_ERROR_INVALID_DST_ADDRESS;
+	return rv;
 
       /* copy the key */
       if (is_ip6)