NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: kern/56836: IPv6 ESN tunneling IPcomp has corrupt header

To: kern-bug-people%netbsd.org@localhost, gnats-admin%netbsd.org@localhost, netbsd-bugs%netbsd.org@localhost, gnats-bugs%netbsd.org@localhost
Subject: Re: kern/56836: IPv6 ESN tunneling IPcomp has corrupt header
From: Andrew Cagney <andrew.cagney%gmail.com@localhost>
Date: Tue, 24 May 2022 14:49:14 -0400

One more thing worth noting.  I'm pretty sure that without this
change, racoon can't interop with itself:

racoon/pfkey.c hard-wires SADB_X_EXT_RAWCPI which means:

- outgoing packets do have a correct IPcomp header (i.e., containing
the CPI), but
- incoming packets with that correct CPI never match the SA because
the SA was hashed using the compression algorithm

References:
- Re: kern/56836: IPv6 ESN tunneling IPcomp has corrupt header
  - From: Andrew Cagney

Prev by Date: PR/56853 CVS commit: src/sys/arch
Next by Date: Re: kern/56836: IPv6 ESN tunneling IPcomp has corrupt header
Previous by Thread: Re: kern/56836: IPv6 ESN tunneling IPcomp has corrupt header
Next by Thread: Re: kern/56836: IPv6 ESN tunneling IPcomp has corrupt header
Indexes:

Home | Main Index | Thread Index | Old Index