The SPI check introduced inea9884b3ac
was intended for IPComp SAs but actually prevented AH SAs from getting installed (depending on the SPI). Fixes:ea9884b3ac
("xfrm: check user specified spi for IPComp") Cc: Fan Du <fan.du@windriver.com> Signed-off-by: Tobias Brunner <tobias@strongswan.org> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>