matthias
/
iproute2
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
iproute2/ip
History
Nicolas Dichtel f323f2a32c iproute2: allow to specify truncation bits on auth algo 
Hi,

here is a patch against iproute2 to allow user to set a state with a specific
auth length.

Example:
$ ip xfrm state add src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000
auth-trunc "sha256" "azertyuiopqsdfghjklmwxcvbn123456" 96 mode tunnel
$ ip xfrm state
src 10.16.0.72 dst 10.16.0.121
         proto ah spi 0x10000000 reqid 0 mode tunnel
         replay-window 0
         auth-trunc hmac(sha256)
0x617a6572747975696f707173646667686a6b6c6d77786376626e313233343536 96
         sel src 0.0.0.0/0 dst 0.0.0.0/0

Regards,
Nicolas

>From 522ed7348cdf3b6f501af2a5a5d989de1696565a Mon Sep 17 00:00:00 2001
From: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date: Thu, 23 Dec 2010 06:48:12 -0500
Subject: [PATCH] iproute2: allow to specify truncation bits on auth algo

Attribute XFRMA_ALG_AUTH_TRUNC can be used to specify
truncation bits, so we add a new algo type: auth-trunc.

Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
 		2011-02-25 19:52:12 -08:00
..
.gitignore Another .gitignore file. 2006-08-08 12:11:23 -07:00
Makefile Support 'mode' parameter when creating macvtap device 2010-11-30 10:01:41 -08:00
ifcfg Remove trailing whitespace 2006-12-05 10:10:22 -08:00
ip.c Allow 'ip addr flush' to loop more than 10 times 2010-12-01 11:13:51 -08:00
ip6tunnel.c Use standard routines for interface name to index etc 2010-11-28 10:35:28 -08:00
ip_common.h ip: add support for multicast rules 2010-06-09 08:49:24 -07:00
ipaddress.c iproute2: support device group semantics 2011-02-25 12:43:07 -08:00
ipaddrlabel.c iproute2: fix addrlabel interface names handling 2010-05-13 09:23:46 -07:00
iplink.c iproute2: support device group semantics 2011-02-25 12:43:14 -08:00
iplink_can.c iproute2: netlink support for bus-error reporting and counters 2010-03-03 16:45:10 -08:00
iplink_macvlan.c iproute2/iplink: add macvlan options for bridge mode 2009-12-26 11:22:57 -08:00
iplink_macvtap.c Support 'mode' parameter when creating macvtap device 2010-11-30 10:01:41 -08:00
iplink_vlan.c iplink_vlan: add support for VLAN loose binding flag 2009-12-26 11:07:16 -08:00
ipmaddr.c ip maddr show” on an infiniband address causes a stack corruption 2009-01-06 18:56:03 -08:00
ipmonitor.c iproute2: drop equalize support. 2009-03-27 11:11:12 -07:00
ipmroute.c iproute: "ip mroute show" doesn't show all output interfaces 2009-12-01 16:15:15 -08:00
ipneigh.c Remove Changes: comments 2009-12-01 15:49:48 -08:00
ipntable.c Remove trailing whitespace 2006-12-05 10:10:22 -08:00
ipprefix.c Remove trailing whitespace 2006-12-05 10:10:22 -08:00
iproute.c iproute: rename 'get_jiffies' since it uses msecs 2011-02-25 12:54:37 -08:00
iprule.c iproute2: Add dsfield as alias for tos for ip rules 2010-07-23 12:27:14 -07:00
iptunnel.c iproute2: treat gre key as number 2010-11-30 09:52:32 -08:00
iptuntap.c Add 'ip tuntap' support. 2009-09-19 12:49:41 -07:00
ipxfrm.c iproute2: allow to specify truncation bits on auth algo 2011-02-25 19:52:12 -08:00
link_gre.c Use standard routines for interface name to index etc 2010-11-28 10:35:28 -08:00
link_veth.c iproute2: support device group semantics 2011-02-25 12:43:14 -08:00
routef ip/routef lifesaver 2007-07-10 18:29:20 -07:00
routel (Logical change 1.3) 2004-04-15 20:56:59 +00:00
rtm_map.c (Logical change 1.3) 2004-04-15 20:56:59 +00:00
rtmon.c iproute2: Support IFF_LOWER_UP and IFF_DORMANT 2007-06-19 16:40:40 -07:00
rtpr (Logical change 1.3) 2004-04-15 20:56:59 +00:00
static-syms.c support static-only systems 2009-11-10 10:44:20 -08:00
tunnel.c Use standard routines for interface name to index etc 2010-11-28 10:35:28 -08:00
tunnel.h Use standard routines for interface name to index etc 2010-11-28 10:35:28 -08:00
xfrm.h xfrm security context support 2011-02-25 12:45:36 -08:00
xfrm_monitor.c ip: xfrm: Fix flush message. 2007-09-05 12:56:51 +01:00
xfrm_policy.c xfrm security context support 2011-02-25 12:45:49 -08:00
xfrm_state.c iproute2: allow to specify truncation bits on auth algo 2011-02-25 19:52:12 -08:00