Hello vpp-dev,
After merge of patch https://gerrit.fd.io/r/#/c/16350/5/src/vnet/ipsec/ we see
all IPv6 IPSec transport mode tests are failing. The reason seem to be the
change in esp_encrypt.c file where only size of ip4 header is taken in the
account.
Following have been testsed with vpp build 19.01-rc0~441-g521a8d7~b5917_amd64.
In the test we first compose (with scapy) outgoing encrypted packet of len 106B:
Sending packet out of ens6 of len 106
###[ Ethernet ]###
dst = fa:16:3e:d7:aa:83
src = fa:16:3e:83:b3:22
type = 0x86dd
###[ IPv6 ]###
version = 6L
tc = 0L
fl = 0L
plen = 52
nh = ESP Header
hlim = 64
src = 3ffe:5f::1
dst = 3ffe:5f::2
###[ ESP ]###
spi = 0x3e8
seq = 1
data =
'\xff\x0fF\xbb\xfa\xbb\xff}\xac\xa12\xb0\xd3\x9d\xf2\xe2G\x181_\xbd\xf3\xd5\xb4\xd4\xcc\xcf\xfc\xfd\x18\x8cb\x1b\xc8\x8b\xc9\x8e\xccFQ+e\x8a\xd1'
but len of received packet (from VPP) is 122:
Received packet on ens6 of len 122
###[ Ethernet ]###
dst = fa:16:3e:83:b3:22
src = fa:16:3e:d7:aa:83
type = 0x86dd
###[ IPv6 ]###
version = 6L
tc = 0L
fl = 0L
plen = 68
nh = ESP Header
hlim = 254
src = 3ffe:5f::2
dst = 3ffe:5f::1
###[ ESP ]###
spi = 0x3e9
seq = 1
data =
"&\xae\xe9\xab'\x04\x1a\xe2\xd7x\x8bR\x96\x0cJ\xf1\xf7\r\r\xad\xac\xd6\xa2e(\x06\xdf\x85G\xedk\xa1\x15e\xe2\xc4\r\xdcw\\#\xb1\xa8\xf7\xbcK\t_\x1b\x82%\x11\xf8h\xe1\xefG\xbdNB"
Could you, please, fix it?
Thanks,
Jan
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#11538): https://lists.fd.io/g/vpp-dev/message/11538
Mute This Topic: https://lists.fd.io/mt/28707467/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
