bsd/net/if_utun_crypto_ipsec.c

420 	utun_crypto_keys_ipsec_args_v1_t *args_ipsec_v1 = &args->u.ipsec_v1;
429 	if (args_ipsec_v1->key_auth_len > MAX_KEY_AUTH_LEN_BITS) {
431 		       args_ipsec_v1->key_auth_len, MAX_KEY_AUTH_LEN_BITS);
434 	if (args_ipsec_v1->key_enc_len > MAX_KEY_ENC_LEN_BITS) {
436 		       args_ipsec_v1->key_enc_len, MAX_KEY_ENC_LEN_BITS);
439 	if (args->varargs_buflen != (__typeof__(args->varargs_buflen))((BITSTOBYTES(args_ipsec_v1->key_auth_len) +
440 									BITSTOBYTES(args_ipsec_v1->key_enc_len)))) {
442 		       args->varargs_buflen, args_ipsec_v1->key_auth_len, args_ipsec_v1->key_enc_len);
448 		proto = utun_ipsec_proto_to_sadb_proto(args_ipsec_v1->proto);
449 		mode = utun_ipsec_mode_to_sadb_mode(args_ipsec_v1->mode);
455 					      args_ipsec_v1->reqid,
456 					      &args_ipsec_v1->src_addr,
457 					      &args_ipsec_v1->dst_addr))) {
466 	satype = utun_ipsec_proto_to_sadb_satype(args_ipsec_v1->proto);
467 	aalg = utun_ipsec_auth_to_sadb_aalg(args_ipsec_v1->alg_auth);
468 	ealg = utun_ipsec_enc_to_sadb_ealg(args_ipsec_v1->alg_enc);
469 	flags = utun_ipsec_keepalive_and_nat_info_to_sadb_flags(args_ipsec_v1->keepalive,
470 								args_ipsec_v1->punt_rx_keepalive,
471 								args_ipsec_v1->natd,
472 								args_ipsec_v1->natt_port);
481 					args_ipsec_v1->replay,
483 					args_ipsec_v1->key_auth_len,
484 					(varargs_buf + BITSTOBYTES(args_ipsec_v1->key_auth_len)),
485 					args_ipsec_v1->key_enc_len,
486 					args_ipsec_v1->natt_port,
487 					args_ipsec_v1->seq,
488 					args_ipsec_v1->spi,
489 					args_ipsec_v1->pid,
490 					args_ipsec_v1->lifetime_hard,
491 					args_ipsec_v1->lifetime_soft))) {
501 	crypto_keys->state.u.ipsec.spi = args_ipsec_v1->spi;
502 	utun_ipsec_set_udp_encap_listen_port(args->dir, args_ipsec_v1->natt_port);
560 	utun_crypto_keys_idx_ipsec_args_v1_t *args_ipsec_v1 = &args->u.ipsec_v1;
564 	proto = utun_ipsec_proto_to_sadb_proto(args_ipsec_v1->proto);
565 	mode = utun_ipsec_mode_to_sadb_mode(args_ipsec_v1->mode);
567 	args_ipsec_v1->spi = 0;
568 	if ((args_ipsec_v1->spi = utun_ipsec_get_spi(&args_ipsec_v1->src_addr,
569 						     &args_ipsec_v1->dst_addr,
572 						     args_ipsec_v1->reqid,
573 						     args_ipsec_v1->spirange_min,
574 						     args_ipsec_v1->spirange_max)) == 0) {