diff options
| author | Dmitry Safonov <dima@arista.com> | 2023-10-23 21:22:03 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2023-10-27 11:35:45 +0200 |
| commit | 9427c6aa3ec92f66b3d38f5d5f7af6b94b648a66 (patch) | |
| tree | 8be6f14d20cbef124e5b570e4a78bc9a0c9ba8fd /net/ipv6/tcp_ipv6.c | |
| parent | net/tcp: Wire TCP-AO to request sockets (diff) | |
| download | linux-9427c6aa3ec92f66b3d38f5d5f7af6b94b648a66.tar.xz linux-9427c6aa3ec92f66b3d38f5d5f7af6b94b648a66.zip | |
net/tcp: Sign SYN-ACK segments with TCP-AO
Similarly to RST segments, wire SYN-ACKs to TCP-AO.
tcp_rsk_used_ao() is handy here to check if the request socket used AO
and needs a signature on the outgoing segments.
Co-developed-by: Francesco Ruggeri <fruggeri@arista.com>
Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
Co-developed-by: Salam Noureddine <noureddine@arista.com>
Signed-off-by: Salam Noureddine <noureddine@arista.com>
Signed-off-by: Dmitry Safonov <dima@arista.com>
Acked-by: David Ahern <dsahern@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
| -rw-r--r-- | net/ipv6/tcp_ipv6.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/ipv6/tcp_ipv6.c b/net/ipv6/tcp_ipv6.c index b08b177847da..8c5c96187a72 100644 --- a/net/ipv6/tcp_ipv6.c +++ b/net/ipv6/tcp_ipv6.c @@ -839,6 +839,7 @@ const struct tcp_request_sock_ops tcp_request_sock_ipv6_ops = { #ifdef CONFIG_TCP_AO .ao_lookup = tcp_v6_ao_lookup_rsk, .ao_calc_key = tcp_v6_ao_calc_key_rsk, + .ao_synack_hash = tcp_v6_ao_synack_hash, #endif #ifdef CONFIG_SYN_COOKIES .cookie_init_seq = cookie_v6_init_sequence, |