Date: Mon, 04 Jun 2018 18:51:14 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 222684] IPv6 AH hmac-sha2-384 is incompatible with Linux AH hmac(sha384) Message-ID: <bug-222684-227-gPxFR0yHza@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-222684-227@https.bugs.freebsd.org/bugzilla/> References: <bug-222684-227@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D222684 --- Comment #16 from commit-hook@freebsd.org --- A commit references this bug: Author: cem Date: Mon Jun 4 18:51:07 UTC 2018 New revision: 334625 URL: https://svnweb.freebsd.org/changeset/base/334625 Log: Correctly handle the padding for IPv6-AH, as specified by RFC4302 The RFC specifies that under IPv6 the complete AH header must be 64 bit aligned, and under IPv4, 32 bit aligned. Prior to this change, we (along with other BSDs and MacOS) had violated this requirement. This makes it possible to set up IPv6-AH between Linux and BSD, and also probably between Windows and BSD. PR: 222684 Reported and tested by: Jason Mader <jasonmader AT gmail.com> Obtained from: NetBSD xform_ah.c 1.105 (b939fe2483972eb43d71bf990cfb7f26dece7839 NetBSD/src on GH) by Maxime Villard MFC after: 35.2731 hours Relnotes: probably (breaks ipv6 compat with older FreeBSD/NetBSD/MacO= S) Sponsored by: Dell EMC Isilon Changes: head/sys/netipsec/xform_ah.c --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-222684-227-gPxFR0yHza>