Received-SPF: pass (google.com: domain of linux-crypto+bounces-2450-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:40f1:3f00::1 as permitted sender) client-ip=2604:1380:40f1:3f00::1;
Message-ID: <82a5cacf-73f5-44e5-ab65-0ff9554037b3@linux.microsoft.com>
Date: Fri, 1 Mar 2024 08:59:37 -0800
Precedence: bulk
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: https over ESP is not working in kernel version 5.10.199
To: "Jayalakshmi Manunath Bhat ," <bhat.jayalakshmi@gmail.com>,
 linux-crypto@vger.kernel.org
References: <CALq8RvJDQ9U4x_Beew0jGQqSQtm3TGXh9m5aSvrzPZeft0h0Kg@mail.gmail.com>
Content-Language: en-US
From: Easwar Hariharan <eahariha@linux.microsoft.com>
In-Reply-To: <CALq8RvJDQ9U4x_Beew0jGQqSQtm3TGXh9m5aSvrzPZeft0h0Kg@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

On 3/1/2024 4:35 AM, Jayalakshmi Manunath Bhat , wrote:
> Hi All.
> 
> On our device I am able to establish IPsec IKEv1 rules successfully on
> kernel version 5.10.199. Ping, Telnet, http (port 80) etc works fine.
> However when I am trying to https to device, operation fails and error
> is in xfrm_input.c and error is
> if (nexthdr == -EBADMSG), nexthdr is EBADMSG and the packet is
> dropped. I do not understand why https fails.
> 
> Have any of you come across this error?
> 
> Regards,
> Jaya

Can you try with a more recent kernel? Try mainline, or a recent 6.6.* stable kernel.

Thanks,
Easwar