sys/netipsec/ipsec_output.c

92 ipsec_process_done(struct mbuf *m, struct ipsecrequest *isr)
101 	IPSEC_ASSERT(isr != NULL, ("null ISR"));
102 	IPSEC_ASSERT(isr->sp != NULL, ("NULL isr->sp"));
103 	sav = isr->sav;
165 	if (isr->next) {
171 			return (ipsec4_process_packet(m, isr->next));
179 			return (ipsec6_process_packet(m, isr->next));
266 	struct ipsecrequest *isr,
273 	if (isr->saidx.proto == IPPROTO_ESP)	\
275 	else if (isr->saidx.proto == IPPROTO_AH)\
282 	IPSECREQUEST_LOCK_ASSERT(isr);
292 	*saidx = isr->saidx;
293 	if (isr->saidx.mode == IPSEC_MODE_TRANSPORT) {
349 	*error = key_checkrequest(isr, saidx);
370 	sav = isr->sav;
372 		IPSEC_ASSERT(ipsec_get_reqlevel(isr) == IPSEC_LEVEL_USE,
374 			ipsec_get_reqlevel(isr)));
375 		IPSECREQUEST_UNLOCK(isr);
376 		isr = isr->next;
378 		 * If isr is NULL, we found a 'use' policy w/o SA.
379 		 * Return w/o error and w/o isr so we can drop out
382 		if (isr == NULL)
383 			return isr;
384 		IPSECREQUEST_LOCK(isr);
391 	if ((isr->saidx.proto == IPPROTO_ESP && !V_esp_enable) ||
392 	    (isr->saidx.proto == IPPROTO_AH && !V_ah_enable) ||
393 	    (isr->saidx.proto == IPPROTO_IPCOMP && !V_ipcomp_enable)) {
411 	return isr;
414 	IPSECREQUEST_UNLOCK(isr);
526 ipsec4_process_packet(struct mbuf *m, struct ipsecrequest *isr)
537 	IPSEC_ASSERT(isr != NULL, ("null isr"));
539 	IPSECREQUEST_LOCK(isr);		/* insure SA contents don't change */
541 	isr = ipsec_nextisr(m, isr, AF_INET, &saidx, &error);
542 	if (isr == NULL) {
548 	sav = isr->sav;
562 	if (isr->saidx.mode == IPSEC_MODE_TUNNEL || /* Tunnel requ'd */
614 	error = (*sav->tdb_xform->xf_output)(m, isr, NULL, i, off);
615 	IPSECREQUEST_UNLOCK(isr);
618 	if (isr)
619 		IPSECREQUEST_UNLOCK(isr);
644 ipsec6_process_packet(struct mbuf *m, struct ipsecrequest *isr)
655 	IPSEC_ASSERT(isr != NULL, ("ipsec6_process_packet: null isr"));
657 	IPSECREQUEST_LOCK(isr);		/* insure SA contents don't change */
659 	isr = ipsec_nextisr(m, isr, AF_INET6, &saidx, &error);
660 	if (isr == NULL) {
665 	sav = isr->sav;
676 	if (isr->saidx.mode == IPSEC_MODE_TUNNEL || /* Tunnel requ'd */
724 	error = (*sav->tdb_xform->xf_output)(m, isr, NULL, i, off);
725 	IPSECREQUEST_UNLOCK(isr);
729 	if (isr)
730 		IPSECREQUEST_UNLOCK(isr);