lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Fri, 19 Oct 2007 22:22:22 +0800 From: Herbert Xu <herbert@...dor.apana.org.au> To: joakim.koskela@...t.fi Cc: netdev@...r.kernel.org, davem@...emloft.net, kaber@...sh.net Subject: Re: [PATCH] netdev: Interfamily support for IPSEC BEET Joakim Koskela <joakim.koskela@...t.fi> wrote: > Hi, > > Here's an updated version of the patch adding support for ipv4/ipv6 > interfamily addressing for the ipsec BEET (Bound End-to-End Tunnel) > mode, as specified by the ietf draft found at: > > http://www.ietf.org/internet-drafts/draft-nikander-esp-beet-mode-07.txt > > The previous implementation required that both address pairs in the SA > were of the same family. This patch enables mixing ipv4 and ipv6 > addresses. All combinations (4-4, 4-6, 6-4, 6-6) have been tested. > > The generic interfamily fixes have been chopped off from this into > separate patches. Please hold onto this. I've got a more generic version of this that doesn't duplicate the inter-family logic between BEET mode and tunnel mode. Instead I've created a generic function that reads info from the inner header and puts them in an address-neutral format which is then picked up by either BEET or tunnel mode. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@...dor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists