Martin Willi c5449195f8 Revert "Fix XFRM-I support for nested ESP tunnels" ... [ Upstream commit 5fc46f9421 ] This reverts commit b0355dbbf1. The reverted commit clears the secpath on packets received via xfrm interfaces to support nested IPsec tunnels. This breaks Netfilter policy matching using xt_policy in the FORWARD chain, as the secpath is missing during forwarding. Additionally, Benedict Wong reports that it breaks Transport-in-Tunnel mode. Fix this regression by reverting the commit until we have a better approach for nested IPsec tunnels. Fixes: b0355dbbf1 ("Fix XFRM-I support for nested ESP tunnels") Link: https://lore.kernel.org/netdev/20230412085615.124791-1-martin@strongswan.org/ Signed-off-by: Martin Willi <martin@strongswan.org> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-05-30 12:57:51 +01:00
..
espintcp.c
Kconfig
Makefile
xfrm_algo.c
xfrm_compat.c	xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()	2023-02-15 17:22:23 +01:00
xfrm_device.c	xfrm: replay: Fix ESN wrap around for GSO	2022-12-02 17:39:58 +01:00
xfrm_hash.c
xfrm_hash.h
xfrm_inout.h
xfrm_input.c	xfrm: fix bug with DSCP copy to v6 from v4 tunnel	2023-02-15 17:22:23 +01:00
xfrm_interface.c	Revert "Fix XFRM-I support for nested ESP tunnels"	2023-05-30 12:57:51 +01:00
xfrm_ipcomp.c
xfrm_output.c
xfrm_policy.c	Revert "Fix XFRM-I support for nested ESP tunnels"	2023-05-30 12:57:51 +01:00
xfrm_proc.c
xfrm_replay.c	xfrm: replay: Fix ESN wrap around for GSO	2022-12-02 17:39:58 +01:00
xfrm_state.c	xfrm: Allow transport-mode states with AF_UNSPEC selector	2023-03-22 13:29:55 +01:00
xfrm_sysctl.c
xfrm_user.c	xfrm: fix rcu lock in xfrm_notify_userpolicy()	2023-01-18 11:44:57 +01:00