Hello David and Herbert, I send a patch to fix pmtu calculation of IPv6 ESP. It is a simple bug which uses the wrong member.
This bug does not seriously affect ordinary use of IPsec. But it is important to pass IPv6 ready logo phase-2 conformance test of IPsec SGW. I will appreciate if you would merge this to the next stable. This patch for torvalds/linux-2.6.git Signed-off-by: Kazunori MIYAZAWA <[EMAIL PROTECTED]> diff --git a/net/ipv6/esp6.c b/net/ipv6/esp6.c --- a/net/ipv6/esp6.c +++ b/net/ipv6/esp6.c @@ -248,7 +248,7 @@ static u32 esp6_get_max_size(struct xfrm if (esp->conf.padlen) mtu = ALIGN(mtu, esp->conf.padlen); - return mtu + x->props.header_len + esp->auth.icv_full_len; + return mtu + x->props.header_len + esp->auth.icv_trunc_len; } static void esp6_err(struct sk_buff *skb, struct inet6_skb_parm *opt, -- Kazunori Miyazawa - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html