imx6ul: IPSec encryption problem for outgoing packets

alampret — Thu, 09 Feb 2017 08:26:45 GMT

Hi,

I'm facing different problems with IPSec aes-ctr encryption, based on different kernel.

Linux 4.1.15_2.0.0_ga:

aes-ctr out encryption seems to be wrong. All packages are dropped by the receiver. Unfortunately I'm not able to find the cause of this issue. Receiving and decryption works fine. Only outgoing packages are affected. Maybe related to this issue: Encryption of IPSEC ESP-packets coming from eth0 fails with CAAM when using AES

Linux 3.14.52_1.1.1_ga:

I'm getting an error on calling /etc/init.d/setkey restart. Seems to be already know key length issue of aes-ctr, as I'm getting the same response as mentioned here: IPSEC AES key length in kernel 3.9.3 - Server Fault

I have a different platform (not NXP) and there everything works fine. So my configuration is definitely correct. The only difference is kernel and platform.

Any ideas how to fix this?

Thank you so much!

Re: imx6ul: IPSec encryption problem for outgoing packets

Yuri — Tue, 28 Feb 2017 06:23:34 GMT

Hello,

Perhaps it makes sense to apply to

NXP Professional Services|NXP

Professional Services Software Technology|NXP

Regards,

Yuri.

Re: imx6ul: IPSec encryption problem for outgoing packets

alampret — Sun, 11 Jun 2017 09:39:00 GMT

I switched to yocto kernel 4.10 and now it works fine

i.MX Processorsのトピックimx6ul: IPSec encryption problem for outgoing packets

imx6ul: IPSec encryption problem for outgoing packets

Re: imx6ul: IPSec encryption problem for outgoing packets

Re: imx6ul: IPSec encryption problem for outgoing packets