tree 7dd4cc9940fc1345300f0621b4c43980800ff25d
parent 447d55b86c3cff97c57c6b6c44cedb53667da397
author Alexander Chernavin <achernavin@netgate.com> 1609147753 -0500
committer Neale Ranns <neale@graphiant.com> 1612900025 +0000

crypto: fix bad-hmac in sw scheduler if async mode

When IPsec async mode is enabled, packets don't pass through the tunnel
if ciphers other than AES GCM are used for child SAs. An error that
arises is "bad-hmac" in the "crypto-dispatch" node.

On the encryption stage, the VNET_CRYPTO_OP_FLAG_HMAC_CHECK flag is set
for the integrity crypto operation when it's not supposed to. It seems
that the flag remains from the previous operation.

With this change, zero flags of crypto operations in the SW scheduler
during operation filling.

Type: fix
Signed-off-by: Alexander Chernavin <achernavin@netgate.com>
Change-Id: Iabac253474e95cb01f9ec0933f3c4860f8a5289c