diff options
| author |   Atzm Watanabe <atzmism@gmail.com> | 2022-08-12 14:29:31 +0900 |
|---|---|---|
| committer |   Beno�t Ganne <bganne@cisco.com> | 2022-08-18 08:03:13 +0000 |
| commit | c65921f7744a0da09ede876b6588628e3a188529 (patch) | |
| tree | fb004fb74260e71a18d245d691c78cc81bb37889 /src/vnet/ip/ip6_hop_by_hop.c | |
| parent | 138f65c5b7796c6401cde6ff92edc85f02c367a4 (diff) | |
ikev2: accept key exchange on CREATE_CHILD_SA
In RFC 7296, CREATE_CHILD_SA Exchange may contain the KE payload
to enable stronger guarantees of forward secrecy.
When the KEi payload is included in the CREATE_CHILD_SA request,
responder should reply with the KEr payload and complete the key
exchange, in accordance with the RFC.
Type: improvement
Signed-off-by: Atzm Watanabe <atzmism@gmail.com>
Change-Id: I13cf6cf24359c11c3366757e585195bb7e999638
Diffstat (limited to 'src/vnet/ip/ip6_hop_by_hop.c')
0 files changed, 0 insertions, 0 deletions