commit 1b582b8e9264ca2514a5118ca0de0a3a5b8f5ba4
author Neale Ranns <nranns@cisco.com> Thu Apr 18 19:49:13 2019 -0700
committer Dave Wallace <dwallacelf@gmail.com> Fri Apr 19 18:29:19 2019 +0000
tree eeb42ff6223d4e37869f94308379bd4ca460ea09
parent 1b52ca965c907812f8279dfeeee95341f15b3439

IPSEC: IPv6 ESP transport mode incorrect packet length and checksum (VPP-1654)

Change-Id: Ia3474e5bfea5764eae9b2987bf78296535df6778
Signed-off-by: Neale Ranns <nranns@cisco.com>

test/template_ipsec.py

diff --git a/test/template_ipsec.py b/test/template_ipsec.py
index 17470d9..3a97820 100644
--- a/test/template_ipsec.py
+++ b/test/template_ipsec.py
@@ -412,6 +412,8 @@
             recv_pkts = self.send_and_expect(self.tra_if, send_pkts,
                                              self.tra_if)
             for rx in recv_pkts:
+                self.assertEqual(len(rx) - len(Ether()), rx[IP].len)
+                self.assert_packet_checksums_valid(rx)
                 try:
                     decrypted = p.vpp_tra_sa.decrypt(rx[IP])
                     self.assert_packet_checksums_valid(decrypted)
@@ -534,6 +536,8 @@
     def verify_encrypted(self, p, sa, rxs):
         decrypt_pkts = []
         for rx in rxs:
+            self.assert_packet_checksums_valid(rx)
+            self.assertEqual(len(rx) - len(Ether()), rx[IP].len)
             try:
                 decrypt_pkt = p.vpp_tun_sa.decrypt(rx[IP])
                 if not decrypt_pkt.haslayer(IP):