Received-SPF: pass (google.com: domain of linux-crypto+bounces-2477-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) client-ip=147.75.48.161;
Precedence: bulk
MIME-Version: 1.0
References: <CALq8RvJDQ9U4x_Beew0jGQqSQtm3TGXh9m5aSvrzPZeft0h0Kg@mail.gmail.com>
 <82a5cacf-73f5-44e5-ab65-0ff9554037b3@linux.microsoft.com>
In-Reply-To: <82a5cacf-73f5-44e5-ab65-0ff9554037b3@linux.microsoft.com>
From: "Jayalakshmi Manunath Bhat ," <bhat.jayalakshmi@gmail.com>
Date: Mon, 4 Mar 2024 11:08:24 +0530
Message-ID: <CALq8Rv+i9omudxjB6B2tP4ij+-onKuZ4s2cju62rX6Hf=FhzEg@mail.gmail.com>
Subject: Re: https over ESP is not working in kernel version 5.10.199
To: Easwar Hariharan <eahariha@linux.microsoft.com>
Cc: linux-crypto@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Easwar,

Thank you for the response. In ourcase 5.10 is the identified the
kernel for the products to be released.
6.6 is not a feasible option.

Regards,
Jayalakshmi


On Fri, Mar 1, 2024 at 10:29=E2=80=AFPM Easwar Hariharan
<eahariha@linux.microsoft.com> wrote:
>
> On 3/1/2024 4:35 AM, Jayalakshmi Manunath Bhat , wrote:
> > Hi All.
> >
> > On our device I am able to establish IPsec IKEv1 rules successfully on
> > kernel version 5.10.199. Ping, Telnet, http (port 80) etc works fine.
> > However when I am trying to https to device, operation fails and error
> > is in xfrm_input.c and error is
> > if (nexthdr =3D=3D -EBADMSG), nexthdr is EBADMSG and the packet is
> > dropped. I do not understand why https fails.
> >
> > Have any of you come across this error?
> >
> > Regards,
> > Jaya
>
> Can you try with a more recent kernel? Try mainline, or a recent 6.6.* st=
able kernel.
>
> Thanks,
> Easwar