]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit
xfrm: Allow xfrmi if_id to be updated by UPDSA
authorNathan Harold <nharold@google.com>
Fri, 20 Jul 2018 02:07:47 +0000 (19:07 -0700)
committerSteffen Klassert <steffen.klassert@secunet.com>
Fri, 20 Jul 2018 08:19:19 +0000 (10:19 +0200)
commit5baf4f9c0035f3e33bb693a1a1e87599f6e804e6
tree899c7923413e61ab861227089c48991ef2bf682a
parentbc56b33404599edc412b91933d74b36873e8ea25
xfrm: Allow xfrmi if_id to be updated by UPDSA

Allow attaching an SA to an xfrm interface id after
the creation of the SA, so that tasks such as keying
which must be done as the SA is created, can remain
separate from the decision on how to route traffic
from an SA. This permits SA creation to be decomposed
in to three separate steps:
1) allocation of a SPI
2) algorithm and key negotiation
3) insertion into the data path

Signed-off-by: Nathan Harold <nharold@google.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_state.c