* https over ESP is not working in kernel version 5.10.199
@ 2024-03-01 12:35 Jayalakshmi Manunath Bhat ,
2024-03-01 16:59 ` Easwar Hariharan
0 siblings, 1 reply; 3+ messages in thread
From: Jayalakshmi Manunath Bhat , @ 2024-03-01 12:35 UTC (permalink / raw)
To: linux-crypto
Hi All.
On our device I am able to establish IPsec IKEv1 rules successfully on
kernel version 5.10.199. Ping, Telnet, http (port 80) etc works fine.
However when I am trying to https to device, operation fails and error
is in xfrm_input.c and error is
if (nexthdr == -EBADMSG), nexthdr is EBADMSG and the packet is
dropped. I do not understand why https fails.
Have any of you come across this error?
Regards,
Jaya
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: https over ESP is not working in kernel version 5.10.199
2024-03-01 12:35 https over ESP is not working in kernel version 5.10.199 Jayalakshmi Manunath Bhat ,
@ 2024-03-01 16:59 ` Easwar Hariharan
2024-03-04 5:38 ` Jayalakshmi Manunath Bhat ,
0 siblings, 1 reply; 3+ messages in thread
From: Easwar Hariharan @ 2024-03-01 16:59 UTC (permalink / raw)
To: Jayalakshmi Manunath Bhat ,, linux-crypto
On 3/1/2024 4:35 AM, Jayalakshmi Manunath Bhat , wrote:
> Hi All.
>
> On our device I am able to establish IPsec IKEv1 rules successfully on
> kernel version 5.10.199. Ping, Telnet, http (port 80) etc works fine.
> However when I am trying to https to device, operation fails and error
> is in xfrm_input.c and error is
> if (nexthdr == -EBADMSG), nexthdr is EBADMSG and the packet is
> dropped. I do not understand why https fails.
>
> Have any of you come across this error?
>
> Regards,
> Jaya
Can you try with a more recent kernel? Try mainline, or a recent 6.6.* stable kernel.
Thanks,
Easwar
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: https over ESP is not working in kernel version 5.10.199
2024-03-01 16:59 ` Easwar Hariharan
@ 2024-03-04 5:38 ` Jayalakshmi Manunath Bhat ,
0 siblings, 0 replies; 3+ messages in thread
From: Jayalakshmi Manunath Bhat , @ 2024-03-04 5:38 UTC (permalink / raw)
To: Easwar Hariharan; +Cc: linux-crypto
Hi Easwar,
Thank you for the response. In ourcase 5.10 is the identified the
kernel for the products to be released.
6.6 is not a feasible option.
Regards,
Jayalakshmi
On Fri, Mar 1, 2024 at 10:29 PM Easwar Hariharan
<eahariha@linux.microsoft.com> wrote:
>
> On 3/1/2024 4:35 AM, Jayalakshmi Manunath Bhat , wrote:
> > Hi All.
> >
> > On our device I am able to establish IPsec IKEv1 rules successfully on
> > kernel version 5.10.199. Ping, Telnet, http (port 80) etc works fine.
> > However when I am trying to https to device, operation fails and error
> > is in xfrm_input.c and error is
> > if (nexthdr == -EBADMSG), nexthdr is EBADMSG and the packet is
> > dropped. I do not understand why https fails.
> >
> > Have any of you come across this error?
> >
> > Regards,
> > Jaya
>
> Can you try with a more recent kernel? Try mainline, or a recent 6.6.* stable kernel.
>
> Thanks,
> Easwar
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2024-03-04 5:39 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-03-01 12:35 https over ESP is not working in kernel version 5.10.199 Jayalakshmi Manunath Bhat ,
2024-03-01 16:59 ` Easwar Hariharan
2024-03-04 5:38 ` Jayalakshmi Manunath Bhat ,
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox