xfrm: extend MIGRATE with UDP encapsulation port

Add UDP encapsulation port to XFRM_MSG_MIGRATE using an optional
netlink attribute XFRMA_ENCAP.

The devices that support IKE MOBIKE extension (RFC-4555 Section 3.8)
could go to sleep for a few minutes and wake up. When it wake up the
NAT mapping could have expired, the device send a MOBIKE UPDATE_SA
message to migrate the IPsec SA. The change could be a change UDP
encapsulation port, IP address, or both.

Reported-by: Paul Wouters <[email protected]>
Signed-off-by: Antony Antony <[email protected]>
Reviewed-by: Richard Guy Briggs <[email protected]>
Signed-off-by: Steffen Klassert <[email protected]>
This commit is contained in:
Antony Antony 2017-06-06 12:12:13 +02:00 • committed by Steffen Klassert
commit 4ab47d47af
5 changed files with 34 additions and 17 deletions

View file

@ -2602,7 +2602,7 @@ static int pfkey_migrate(struct sock *sk, struct sk_buff *skb,
}
return xfrm_migrate(&sel, dir, XFRM_POLICY_TYPE_MAIN, m, i,
kma ? &k : NULL, net);
kma ? &k : NULL, net, NULL);
out:
return err;