1
2
3
4
5
6
7
8
9
10#include <net/ip.h>
11#include <net/xfrm.h>
12#include <linux/pfkeyv2.h>
13#include <linux/ipsec.h>
14#include <linux/netfilter_ipv4.h>
15
16static int xfrm4_init_flags(struct xfrm_state *x)
17{
18 if (ipv4_config.no_pmtu_disc)
19 x->props.flags |= XFRM_STATE_NOPMTUDISC;
20 return 0;
21}
22
23static void
24__xfrm4_init_tempsel(struct xfrm_selector *sel, struct flowi *fl)
25{
26 sel->daddr.a4 = fl->fl4_dst;
27 sel->saddr.a4 = fl->fl4_src;
28 sel->dport = xfrm_flowi_dport(fl);
29 sel->dport_mask = htons(0xffff);
30 sel->sport = xfrm_flowi_sport(fl);
31 sel->sport_mask = htons(0xffff);
32 sel->family = AF_INET;
33 sel->prefixlen_d = 32;
34 sel->prefixlen_s = 32;
35 sel->proto = fl->proto;
36 sel->ifindex = fl->oif;
37}
38
39static void
40xfrm4_init_temprop(struct xfrm_state *x, struct xfrm_tmpl *tmpl,
41 xfrm_address_t *daddr, xfrm_address_t *saddr)
42{
43 x->id = tmpl->id;
44 if (x->id.daddr.a4 == 0)
45 x->id.daddr.a4 = daddr->a4;
46 x->props.saddr = tmpl->saddr;
47 if (x->props.saddr.a4 == 0)
48 x->props.saddr.a4 = saddr->a4;
49 x->props.mode = tmpl->mode;
50 x->props.reqid = tmpl->reqid;
51 x->props.family = AF_INET;
52}
53
54int xfrm4_extract_header(struct sk_buff *skb)
55{
56 struct iphdr *iph = ip_hdr(skb);
57
58 XFRM_MODE_SKB_CB(skb)->ihl = sizeof(*iph);
59 XFRM_MODE_SKB_CB(skb)->id = iph->id;
60 XFRM_MODE_SKB_CB(skb)->frag_off = iph->frag_off;
61 XFRM_MODE_SKB_CB(skb)->tos = iph->tos;
62 XFRM_MODE_SKB_CB(skb)->ttl = iph->ttl;
63 XFRM_MODE_SKB_CB(skb)->optlen = iph->ihl * 4 - sizeof(*iph);
64 memset(XFRM_MODE_SKB_CB(skb)->flow_lbl, 0,
65 sizeof(XFRM_MODE_SKB_CB(skb)->flow_lbl));
66
67 return 0;
68}
69
70static struct xfrm_state_afinfo xfrm4_state_afinfo = {
71 .family = AF_INET,
72 .proto = IPPROTO_IPIP,
73 .eth_proto = htons(ETH_P_IP),
74 .owner = THIS_MODULE,
75 .init_flags = xfrm4_init_flags,
76 .init_tempsel = __xfrm4_init_tempsel,
77 .init_temprop = xfrm4_init_temprop,
78 .output = xfrm4_output,
79 .extract_input = xfrm4_extract_input,
80 .extract_output = xfrm4_extract_output,
81 .transport_finish = xfrm4_transport_finish,
82};
83
84void __init xfrm4_state_init(void)
85{
86 xfrm_state_register_afinfo(&xfrm4_state_afinfo);
87}
88
89#if 0
90void __exit xfrm4_state_fini(void)
91{
92 xfrm_state_unregister_afinfo(&xfrm4_state_afinfo);
93}
94#endif
95
96