I noticed that using extensions headers along with IPsecv6 tunnel mode did
not work in 2.5.73 + patch-2.5.73-bk3. The following patch
checks "nexthdr" instead of "iph->nexthdr" which could be an
extension header. I tested this with tunnel mode and transport mode
with and without extension headers and it worked ok.
Let me know if it is ok.
Joy Latten
-----------------------------------------------------------------------
--- xfrm6_input.c.orig 2003-06-30 11:04:31.000000000 -0500
+++ xfrm6_input.c 2003-06-30 11:09:27.000000000 -0500
@@ -67,10 +67,8 @@
xfrm_vec[xfrm_nr++].xvec = x;
- iph = skb->nh.ipv6h;
-
if (x->props.mode) { /* XXX */
- if (iph->nexthdr != IPPROTO_IPV6)
+ if (nexthdr != IPPROTO_IPV6)
goto drop;
skb->nh.raw = skb->data;
iph = skb->nh.ipv6h;