Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ipsec: Fix IPsec decrypt_esp for NAT-Traversal #4370

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

ipsec: Fix IPsec decrypt_esp for NAT-Traversal #4370

wants to merge 2 commits into from

Commits on May 19, 2024

  1. ipsec: Fix IPsec decrypt_esp for NAT-Traversal 

    When having nat_header, encrypted.underlayer will return
UDP/ESP, so when decrypting IPv6 packet, the decrypt packet
will be return with nat_header (UDP), which will return a corrupted packet.

Example:

original packet:
IPv6/TCP/Raw
encrypted packet:
IPv6/UDP/ESP
Decrypted packet:
IPv6/UDP/TCP/Raw

Signed-off-by: Iman Afaneh <[email protected]>
    @ImanAfaneh293
    ImanAfaneh293 committed May 19, 2024
    Configuration menu
    Copy the full SHA
    1232bb3 View commit details
    Browse the repository at this point in the history

  2. ipsec.uts: add unit test for IPsec NAT-Traversal 

    Signed-off-by: Iman Afaneh <[email protected]>
    @ImanAfaneh293
    ImanAfaneh293 committed May 19, 2024
    Configuration menu
    Copy the full SHA
    39218a1 View commit details
    Browse the repository at this point in the history