When sending ICMP packets for IPsec path MTU discovery, the first
authorbluhm <bluhm@openbsd.org>
Wed, 24 Nov 2021 18:48:33 +0000 (18:48 +0000)
committerbluhm <bluhm@openbsd.org>
Wed, 24 Nov 2021 18:48:33 +0000 (18:48 +0000)
commit6d36119535d77e3442deb6d8127913d1fe2e309d
tree636fdf546cb753086241e86a1c221a147854ecc2
parent699c12df0f59748ef858b7cc86543481d49757c4
When sending ICMP packets for IPsec path MTU discovery, the first
ICMP packet could be wrong.  The mtu was taken from the loopback
interface as the tdb mtu was copied to the route too late.  Without
crypto task, ipsp_process_packet() returns the EMSGSIZE error
earlier.  Immediately update tdb and route mtu.
IPv4 part from markus@; OK tobhe@
sys/netinet/ip_output.c
sys/netinet6/ip6_output.c