linux_media

mirror of https://github.com/tbsdtv/linux_media.git synced 2025-07-23 12:43:29 +02:00

Files

Martin Willi 5fc46f9421 Revert "Fix XFRM-I support for nested ESP tunnels"

This reverts commit b0355dbbf1.

The reverted commit clears the secpath on packets received via xfrm interfaces
to support nested IPsec tunnels. This breaks Netfilter policy matching using
xt_policy in the FORWARD chain, as the secpath is missing during forwarding.
Additionally, Benedict Wong reports that it breaks Transport-in-Tunnel mode.

Fix this regression by reverting the commit until we have a better approach
for nested IPsec tunnels.

Fixes: b0355dbbf1 ("Fix XFRM-I support for nested ESP tunnels")
Link: https://lore.kernel.org/netdev/20230412085615.124791-1-martin@strongswan.org/
Signed-off-by: Martin Willi <martin@strongswan.org>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

2023-04-25 09:50:34 +02:00

espintcp.c

net/sock: Introduce trace_sk_data_ready()

2023-01-23 11:26:50 +00:00

Kconfig

xfrm/compat: Add 32=>64-bit messages translator

2020-09-24 08:53:03 +02:00

Makefile

xfrm: interface: Add unstable helpers for setting/getting XFRM metadata from TC-BPF

2022-12-05 21:58:27 -08:00

xfrm_algo.c

xfrm: Add support for SM4 symmetric cipher algorithm