Re: [PATCH ipsec] xfrm: fix sa selector validation

2019-06-18 Thread Steffen Klassert
On Sat, Jun 15, 2019 at 12:11:48AM +0800, Herbert Xu wrote: > On Fri, Jun 14, 2019 at 11:13:55AM +0200, Nicolas Dichtel wrote: > > After commit b38ff4075a80, the following command does not work anymore: > > $ ip xfrm state add src 10.125.0.2 dst 10.125.0.1 proto esp spi 34 reqid 1 \ > > mode tunn

Re: [PATCH ipsec] xfrm: fix sa selector validation

2019-06-14 Thread Herbert Xu
On Fri, Jun 14, 2019 at 11:13:55AM +0200, Nicolas Dichtel wrote: > After commit b38ff4075a80, the following command does not work anymore: > $ ip xfrm state add src 10.125.0.2 dst 10.125.0.1 proto esp spi 34 reqid 1 \ > mode tunnel enc 'cbc(aes)' 0xb0abdba8b782ad9d364ec81e3a7d82a1 auth-trunc \ >