netdev - packet encryption based on gre key value with ip xfrm command

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Mon, 1 Jun 2015 01:51:05 +0530
From:	Harsh Jain <harshjain.prof@...il.com>
To:	netdev@...r.kernel.org
Subject: packet encryption based on gre key value with ip xfrm command

Hi,

I am trying to encrypt Gre packet have specific key values in GRE
header with following command

ip xfrm policy add src 192.168.1.9 dst 192.168.1.5 proto gre key 3 dir
in tmpl src 192.168.1.9 dst 192.168.1.5 proto esp reqid 16387 mode
transport

But it is not working. If I remove the "key 3" from above system
encrypt all GRE packets.

I tried with kernel version 3.18 and iproute2 version.2.4.

 I got iproute2 patch file having changes to support filtering based
on keys but didn't find corresponding kernel patch.
How to encrypt Packets based on GRE key value.?

Regards
Harsh Jain
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html