From 494f1f3473d07947e3e03ce410ac0690eaeb9ed9 Mon Sep 17 00:00:00 2001
From: Viacheslav <v.gletenko@vyos.io>
Date: Thu, 28 Oct 2021 16:08:29 +0000
Subject: IPSec: T3941: Fix uptime for tunnels sa op-mode

The current uptime for tunnels is getting from parent SA
That incorrect as we should get value from child SA
---
 src/op_mode/show_ipsec_sa.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/op_mode/show_ipsec_sa.py b/src/op_mode/show_ipsec_sa.py
index c964caaeb..e72f0f965 100755
--- a/src/op_mode/show_ipsec_sa.py
+++ b/src/op_mode/show_ipsec_sa.py
@@ -46,7 +46,6 @@ def format_output(conns, sas):
 
         if parent_sa["state"] == b"ESTABLISHED" and installed_sas:
             state = "up"
-            uptime = vyos.util.seconds_to_human(parent_sa["established"].decode())
 
         remote_host = parent_sa["remote-host"].decode()
         remote_id = parent_sa["remote-id"].decode()
@@ -75,6 +74,8 @@ def format_output(conns, sas):
             # Remove B from <1K values
             pkts_str = re.sub(r'B', r'', pkts_str)
 
+            uptime = vyos.util.seconds_to_human(isa['install-time'].decode())
+
             enc = isa["encr-alg"].decode()
             if "encr-keysize" in isa:
                 key_size = isa["encr-keysize"].decode()
-- 
cgit v1.2.3