diff options
| author | Luiz Otavio O Souza <luiz@netgate.com> | 2015-09-16 08:07:37 -0500 |
|---|---|---|
| committer | Luiz Otavio O Souza <luiz@netgate.com> | 2015-10-20 12:09:17 -0500 |
| commit | f777614c20ed6cd6ad10bfce3191ac8b1431bd5f (patch) | |
| tree | ed6d22eb8a3cd7c7222b054d90c81956f1dc9ed3 /sys/netipsec/xform.h | |
| parent | 3175ce5dd251d2c811f3d0879cd3cfd577ff506d (diff) | |
| download | FreeBSD-src-f777614c20ed6cd6ad10bfce3191ac8b1431bd5f.zip FreeBSD-src-f777614c20ed6cd6ad10bfce3191ac8b1431bd5f.tar.gz | |
MFC r286000:
RFC4868 section 2.3 requires that the output be half... This fixes
problems that was introduced in r285336... I have verified that
HMAC-SHA2-256 both ah only and w/ AES-CBC interoperate w/ a NetBSD
6.1.5 vm...
Reviewed by: gnn
TAG: IPSEC-HEAD
Issue: #4841
Diffstat (limited to 'sys/netipsec/xform.h')
| -rw-r--r-- | sys/netipsec/xform.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netipsec/xform.h b/sys/netipsec/xform.h index 132717f..fee457b 100644 --- a/sys/netipsec/xform.h +++ b/sys/netipsec/xform.h @@ -105,6 +105,7 @@ struct xformsw { #ifdef _KERNEL extern void xform_register(struct xformsw*); extern int xform_init(struct secasvar *sav, int xftype); +extern int xform_ah_authsize(struct auth_hash *esph); struct cryptoini; |
