crypto: fix bad-hmac in sw scheduler if async mode 50/30550/3
authorAlexander Chernavin <achernavin@netgate.com>
Mon, 28 Dec 2020 09:29:13 +0000 (04:29 -0500)
committerNeale Ranns <neale@graphiant.com>
Tue, 9 Feb 2021 19:47:05 +0000 (19:47 +0000)
commit74b2a9b2c6a3d25cd02b1757816ce1a598a03a03
tree7dd4cc9940fc1345300f0621b4c43980800ff25d
parent447d55b86c3cff97c57c6b6c44cedb53667da397
crypto: fix bad-hmac in sw scheduler if async mode

When IPsec async mode is enabled, packets don't pass through the tunnel
if ciphers other than AES GCM are used for child SAs. An error that
arises is "bad-hmac" in the "crypto-dispatch" node.

On the encryption stage, the VNET_CRYPTO_OP_FLAG_HMAC_CHECK flag is set
for the integrity crypto operation when it's not supposed to. It seems
that the flag remains from the previous operation.

With this change, zero flags of crypto operations in the SW scheduler
during operation filling.

Type: fix
Signed-off-by: Alexander Chernavin <achernavin@netgate.com>
Change-Id: Iabac253474e95cb01f9ec0933f3c4860f8a5289c
src/plugins/crypto_sw_scheduler/main.c