Received: by 2002:ab2:3141:0:b0:1ed:23cc:44d1 with SMTP id i1csp258189lqg; Fri, 1 Mar 2024 04:36:39 -0800 (PST) X-Forwarded-Encrypted: i=3; AJvYcCUYgYpDOrdkluwa3hiNB2YnlI+LzzrkFNeDWutL1/ny6o1gBbvuHN7k1AnXXq+UI+mmT+B/Qo/tCfINyWWFe3X16RJfEsdO/cWphh+IzQ== X-Google-Smtp-Source: AGHT+IE1w9qheVgurj51Y2l5LkaRtd5d089c5fo4pB0DaIuIRarsyGdpycPe5WuXaCD9N8Icihw0 X-Received: by 2002:a05:6871:511:b0:21f:9eaa:3f5 with SMTP id s17-20020a056871051100b0021f9eaa03f5mr1349557oal.59.1709296599341; Fri, 01 Mar 2024 04:36:39 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1709296599; cv=pass; d=google.com; s=arc-20160816; b=Vg8zMcRQXSebrYQbhBt3TudLdlo1IfDynSPXNg72+PWonmi2Rcj237zOQmHj36char PENuwPVFB3pt4IwN5BJ2CDMIXT8Ht/Cu+nXX+hM07msElYqyPfYe2YqhdkFBiPx1in1R onGZb5X7FKt3gcX6D2B35UiMrpaTdE03aVGq+sdD4gzOEALoAWFk9b/9znDDggiU0Psx 0QXl0pEisX2G4SLID867GZjZn5Ny7s40ByVp2e2OI3jjEJjr2Rm2uFpVPlZSSiiMM+Hc OVQk4uY7lCYl2qeL0WaDexpipOgFbsacArvgznKtUqjbwGsyCdC7JGaGjyAT30HuQ9CV nddQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:dkim-signature; bh=46QQdgNfVCnY0kDCTnTRBIKamFFvFvZLtfXf6iIr6kA=; fh=uKl1CTlin8qnxt56ErGp3UOINPCBskOXHDuKvJLDQbo=; b=0YSN/KViq/IbUyrRzgBJtCta93S6QPfGAZ+jlxajKXRtBatdSuqBAU7wLRaePzv2VH GFpzXfefcs8dIhuSntnuNcwba5aLwIEhNT0C46IPNjFEqmsk9z0oBp+fwIzGk2cUzeFk elL0O5TAqDq91AAkxO5YtKcfnH3/pnTWoKHorMrPNp2Cd85E8Dal46v02K7VCF17fy4Q m9U08JWvv8EqfRK4utcip5+LMo5LFZciyTgyu+g8eqp+z7IrbMwT+GdTCVkM7czOc0Sq X2W1iUA+Le0RwlqaSPTTmewQkpYZxNQOZNHdP422VHlaprccjL/Enpr2FvjfV3u2GBmj geBA==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=ZQu6g3pV; arc=pass (i=1 spf=pass spfdomain=gmail.com dkim=pass dkdomain=gmail.com dmarc=pass fromdomain=gmail.com); spf=pass (google.com: domain of linux-crypto+bounces-2425-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-crypto+bounces-2425-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [147.75.199.223]) by mx.google.com with ESMTPS id cz53-20020a05620a36f500b0078732031756si3746939qkb.601.2024.03.01.04.36.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 01 Mar 2024 04:36:39 -0800 (PST) Received-SPF: pass (google.com: domain of linux-crypto+bounces-2425-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=ZQu6g3pV; arc=pass (i=1 spf=pass spfdomain=gmail.com dkim=pass dkdomain=gmail.com dmarc=pass fromdomain=gmail.com); spf=pass (google.com: domain of linux-crypto+bounces-2425-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-crypto+bounces-2425-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id F1AED1C22498 for ; Fri, 1 Mar 2024 12:36:38 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id EF88A15CC; Fri, 1 Mar 2024 12:36:36 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="ZQu6g3pV" X-Original-To: linux-crypto@vger.kernel.org Received: from mail-oo1-f49.google.com (mail-oo1-f49.google.com [209.85.161.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 668C91115 for ; Fri, 1 Mar 2024 12:36:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.161.49 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1709296596; cv=none; b=mnSwqugkpxWYUtTOQc8Zx9kGEL/DZAMM1GOxK2oB0BaQ1+iSKLzvnLDMgKrnKoH/ctNgOyzft+80VCR4/wMqKTjsUW/D7aPtqaYJyqcpEV84eu9xNCqv1Vh5Pgz0pW9ENPNt5byYGZqPA9hWNEm3wxRl/ydJYts9kxBW5r7NWIM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1709296596; c=relaxed/simple; bh=46QQdgNfVCnY0kDCTnTRBIKamFFvFvZLtfXf6iIr6kA=; h=MIME-Version:From:Date:Message-ID:Subject:To:Content-Type; b=J4u8epc5hfuBJKHZf2fUXPMjhNNFHok6upAXBq4Wt54YdhHOQl0da1LtcGAyq6Bd4z9DnW05dVCLLhWndoQ8ipZCSdgbNp574lKrk6XZihg86tx02FTXbkgQsQZ8b46nw+/WtG0aeCQiiLmDpxaLhQvUT6NLbSBjWh/B8zNsr/0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=ZQu6g3pV; arc=none smtp.client-ip=209.85.161.49 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-oo1-f49.google.com with SMTP id 006d021491bc7-5a0deaf21efso1118045eaf.0 for ; Fri, 01 Mar 2024 04:36:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1709296594; x=1709901394; darn=vger.kernel.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=46QQdgNfVCnY0kDCTnTRBIKamFFvFvZLtfXf6iIr6kA=; b=ZQu6g3pV6jRuYFXEpvsI93TCvrSomvNZH58rzPAeWYVZjM8oACGd2+qnxdrY63Maiv iezRwunbxuGHROflfO7bbgfpvXj9qlOBmkkR0RnS2EIdqsFfyyRPsPWXbeY/bt4uY9R+ C9OvUW0DiL9vFAI0spGxWc7JsYZxX+y06p3sY/S8Ddu5Cl0LVoFq1EfHZiVs2T4q5iuS LePitR2yYwfVY/T5mht24bmsWauv09dOX/12Y70NUr4sVH4defAN4OpesLoGqVLJ8gVM pS6PhYQupOlMA5LY6UW30o8SAV3aZFO9vXV2KDCwSj9VUQqd9iIfKYfc9SS7O7xfsm1N 7QNw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1709296594; x=1709901394; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=46QQdgNfVCnY0kDCTnTRBIKamFFvFvZLtfXf6iIr6kA=; b=hLf0ERqnYfatnAwx7TKDEFcfAv5pTk1/Os0tEFI1HrlxZJrxudbhg0Aow+sprcg+pN vKzj1/w4OB6uiyD19SwLrSiv5IHVzyiI3vqM8mGOv5/gqpyDo8XFD+X5C1fXJf9ggCzg GKaM0vzdDNDZ2Xc5CoyI+2aPBm6BwB+70v8FUZfCKox1pvnLZfz/j/6ryF6SU/XXci34 X329Zfu+922IJclNj1RTf6kkR0VieW9BmvX3PuVwhGRV6BSDaLw0i1E5jLF5ns/NN6g6 dz62sZApDK5lD9GVEPa3ndNyolPVSV8xnjZBcfMRhOGe85Jo+tir9EXghyjC3VulDCpG +xQA== X-Gm-Message-State: AOJu0YzkgfsMEvHhiEntU2JcKreuB0Qo8LUk5Eky7xwZ8XKw2WQFIziW qAwSkaNMaJh5qlCRHB7qOWaa+/08IcLU1EQgPKmKFTxjfNyJEKk/05LPnrKMDQjP4qbGT1hlrBr k6TseW2pSrVBGL6QSUYnUkxL/vJ/dmsOa3Q== X-Received: by 2002:a4a:3557:0:b0:5a1:82c:be8b with SMTP id w23-20020a4a3557000000b005a1082cbe8bmr543161oog.0.1709296594147; Fri, 01 Mar 2024 04:36:34 -0800 (PST) Precedence: bulk X-Mailing-List: linux-crypto@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 From: "Jayalakshmi Manunath Bhat ," Date: Fri, 1 Mar 2024 18:05:57 +0530 Message-ID: Subject: https over ESP is not working in kernel version 5.10.199 To: linux-crypto@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Hi All. On our device I am able to establish IPsec IKEv1 rules successfully on kernel version 5.10.199. Ping, Telnet, http (port 80) etc works fine. However when I am trying to https to device, operation fails and error is in xfrm_input.c and error is if (nexthdr == -EBADMSG), nexthdr is EBADMSG and the packet is dropped. I do not understand why https fails. Have any of you come across this error? Regards, Jaya