Lines Matching refs:ahstack

115 #define	ah1dbg(ahstack, a)	if (ahstack->ipsecah_debug != 0) printf a  argument
116 #define ah2dbg(ahstack, a) if (ahstack->ipsecah_debug > 1) printf a argument
117 #define ah3dbg(ahstack, a) if (ahstack->ipsecah_debug > 2) printf a argument
185 ah_kstat_init(ipsecah_stack_t *ahstack, netstackid_t stackid) in ah_kstat_init() argument
187 ipsec_stack_t *ipss = ahstack->ipsecah_netstack->netstack_ipsec; in ah_kstat_init()
189 ahstack->ah_ksp = kstat_create_netstack("ipsecah", 0, "ah_stat", "net", in ah_kstat_init()
193 if (ahstack->ah_ksp == NULL || ahstack->ah_ksp->ks_data == NULL) in ah_kstat_init()
196 ahstack->ah_kstats = ahstack->ah_ksp->ks_data; in ah_kstat_init()
198 ahstack->ah_ksp->ks_update = ah_kstat_update; in ah_kstat_init()
199 ahstack->ah_ksp->ks_private = (void *)(uintptr_t)stackid; in ah_kstat_init()
202 #define KI(x) kstat_named_init(&(ahstack->ah_kstats->ah_stat_##x), #x, K64) in ah_kstat_init()
221 kstat_install(ahstack->ah_ksp); in ah_kstat_init()
266 ipsecah_stack_t *ahstack = (ipsecah_stack_t *)arg; in ah_ager() local
267 netstack_t *ns = ahstack->ipsecah_netstack; in ah_ager()
270 sadb_ager(&ahstack->ah_sadb.s_v4, ahstack->ah_pfkey_q, in ah_ager()
271 ahstack->ipsecah_reap_delay, ns); in ah_ager()
272 sadb_ager(&ahstack->ah_sadb.s_v6, ahstack->ah_pfkey_q, in ah_ager()
273 ahstack->ipsecah_reap_delay, ns); in ah_ager()
275 ahstack->ah_event = sadb_retimeout(begin, ahstack->ah_pfkey_q, in ah_ager()
276 ah_ager, ahstack, in ah_ager()
277 &ahstack->ipsecah_age_interval, ahstack->ipsecah_age_int_max, in ah_ager()
294 ipsecah_stack_t *ahstack = (ipsecah_stack_t *)q->q_ptr; local
296 mutex_enter(&ahstack->ipsecah_param_lock);
298 mutex_exit(&ahstack->ipsecah_param_lock);
318 ipsecah_stack_t *ahstack = (ipsecah_stack_t *)q->q_ptr; local
331 mutex_enter(&ahstack->ipsecah_param_lock);
333 mutex_exit(&ahstack->ipsecah_param_lock);
344 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ipsecah_fill_defs() local
346 ecomb->sadb_x_ecomb_soft_bytes = ahstack->ipsecah_default_soft_bytes; in ipsecah_fill_defs()
347 ecomb->sadb_x_ecomb_hard_bytes = ahstack->ipsecah_default_hard_bytes; in ipsecah_fill_defs()
349 ahstack->ipsecah_default_soft_addtime; in ipsecah_fill_defs()
351 ahstack->ipsecah_default_hard_addtime; in ipsecah_fill_defs()
353 ahstack->ipsecah_default_soft_usetime; in ipsecah_fill_defs()
355 ahstack->ipsecah_default_hard_usetime; in ipsecah_fill_defs()
406 ipsecah_stack_t *ahstack; in ipsecah_stack_init() local
409 ahstack = (ipsecah_stack_t *)kmem_zalloc(sizeof (*ahstack), KM_SLEEP); in ipsecah_stack_init()
410 ahstack->ipsecah_netstack = ns; in ipsecah_stack_init()
413 ahstack->ipsecah_params = ahp; in ipsecah_stack_init()
416 (void) ipsecah_param_register(&ahstack->ipsecah_g_nd, ahp, in ipsecah_stack_init()
419 (void) ah_kstat_init(ahstack, stackid); in ipsecah_stack_init()
421 ahstack->ah_sadb.s_acquire_timeout = &ahstack->ipsecah_acquire_timeout; in ipsecah_stack_init()
422 ahstack->ah_sadb.s_acqfn = ah_send_acquire; in ipsecah_stack_init()
423 sadbp_init("AH", &ahstack->ah_sadb, SADB_SATYPE_AH, ah_hash_size, in ipsecah_stack_init()
424 ahstack->ipsecah_netstack); in ipsecah_stack_init()
426 mutex_init(&ahstack->ipsecah_param_lock, NULL, MUTEX_DEFAULT, 0); in ipsecah_stack_init()
428 ip_drop_register(&ahstack->ah_dropper, "IPsec AH"); in ipsecah_stack_init()
429 return (ahstack); in ipsecah_stack_init()
448 ipsecah_stack_t *ahstack = (ipsecah_stack_t *)arg; in ipsecah_stack_fini() local
450 if (ahstack->ah_pfkey_q != NULL) { in ipsecah_stack_fini()
451 (void) quntimeout(ahstack->ah_pfkey_q, ahstack->ah_event); in ipsecah_stack_fini()
453 ahstack->ah_sadb.s_acqfn = NULL; in ipsecah_stack_fini()
454 ahstack->ah_sadb.s_acquire_timeout = NULL; in ipsecah_stack_fini()
455 sadbp_destroy(&ahstack->ah_sadb, ahstack->ipsecah_netstack); in ipsecah_stack_fini()
456 ip_drop_unregister(&ahstack->ah_dropper); in ipsecah_stack_fini()
457 mutex_destroy(&ahstack->ipsecah_param_lock); in ipsecah_stack_fini()
458 nd_free(&ahstack->ipsecah_g_nd); in ipsecah_stack_fini()
460 kmem_free(ahstack->ipsecah_params, sizeof (lcl_param_arr)); in ipsecah_stack_fini()
461 ahstack->ipsecah_params = NULL; in ipsecah_stack_fini()
462 kstat_delete_netstack(ahstack->ah_ksp, stackid); in ipsecah_stack_fini()
463 ahstack->ah_ksp = NULL; in ipsecah_stack_fini()
464 ahstack->ah_kstats = NULL; in ipsecah_stack_fini()
466 kmem_free(ahstack, sizeof (*ahstack)); in ipsecah_stack_fini()
483 ipsecah_stack_t *ahstack; in ipsecah_open() local
496 ahstack = ns->netstack_ipsecah; in ipsecah_open()
497 ASSERT(ahstack != NULL); in ipsecah_open()
499 q->q_ptr = ahstack; in ipsecah_open()
512 ipsecah_stack_t *ahstack = (ipsecah_stack_t *)q->q_ptr; in ipsecah_close() local
521 if (q == ahstack->ah_pfkey_q) { in ipsecah_close()
522 ah1dbg(ahstack, in ipsecah_close()
524 ahstack->ah_pfkey_q = NULL; in ipsecah_close()
526 (void) quntimeout(q, ahstack->ah_event); in ipsecah_close()
529 netstack_rele(ahstack->ipsecah_netstack); in ipsecah_close()
538 ipsecah_stack_t *ahstack, cred_t *cr) in ah_register_out() argument
549 ipsec_stack_t *ipss = ahstack->ipsecah_netstack->netstack_ipsec; in ah_register_out()
679 if (ahstack->ah_pfkey_q != NULL) in ah_register_out()
680 putnext(ahstack->ah_pfkey_q, mp); in ah_register_out()
697 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ipsecah_algs_changed() local
703 (void) ah_register_out(0, 0, 0, ahstack, NULL); in ipsecah_algs_changed()
740 ipsecah_stack_t *ahstack; in ah_inbound_restart() local
743 ahstack = ns->netstack_ipsecah; in ah_inbound_restart()
745 ASSERT(ahstack != NULL); in ah_inbound_restart()
771 int *diagnostic, ipsecah_stack_t *ahstack) in ah_add_sa_finish() argument
784 netstack_t *ns = ahstack->ipsecah_netstack; in ah_add_sa_finish()
791 sq.spp = &ahstack->ah_sadb; in ah_add_sa_finish()
937 rc = sadb_common_add(ahstack->ah_pfkey_q, mp, in ah_add_sa_finish()
939 diagnostic, ns, &ahstack->ah_sadb); in ah_add_sa_finish()
978 AH_BUMP_STAT(ahstack, out_discards); in ah_add_sa_finish()
981 &ahstack->ah_dropper); in ah_add_sa_finish()
984 AH_BUMP_STAT(ahstack, out_discards); in ah_add_sa_finish()
987 &ahstack->ah_dropper); in ah_add_sa_finish()
1007 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_outbound_finish() local
1012 AH_BUMP_STAT(ahstack, out_discards); in ah_outbound_finish()
1015 &ahstack->ah_dropper); in ah_outbound_finish()
1053 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_add_sa() local
1097 if (assoc->sadb_sa_flags & ~ahstack->ah_sadb.s_addflags) { in ah_add_sa()
1130 ah1dbg(ahstack, ("Couldn't find auth alg #%d.\n", in ah_add_sa()
1154 diagnostic, ahstack)); in ah_add_sa()
1165 ipsecah_stack_t *ahstack, uint8_t sadb_msg_type) in ah_update_sa() argument
1178 rcode = sadb_update_sa(mp, ksi, &buf_pkt, &ahstack->ah_sadb, in ah_update_sa()
1179 diagnostic, ahstack->ah_pfkey_q, ah_add_sa, in ah_update_sa()
1180 ahstack->ipsecah_netstack, sadb_msg_type); in ah_update_sa()
1187 HANDLE_BUF_PKT(ah_taskq, ahstack->ipsecah_netstack->netstack_ipsec, in ah_update_sa()
1188 ahstack->ah_dropper, buf_pkt); in ah_update_sa()
1200 ipsecah_stack_t *ahstack, uint8_t sadb_msg_type) in ah_del_sa() argument
1219 (sin->sin_family == AF_INET6) ? &ahstack->ah_sadb.s_v6 : in ah_del_sa()
1220 &ahstack->ah_sadb.s_v4, diagnostic, ahstack->ah_pfkey_q)); in ah_del_sa()
1223 return (sadb_delget_sa(mp, ksi, &ahstack->ah_sadb, diagnostic, in ah_del_sa()
1224 ahstack->ah_pfkey_q, sadb_msg_type)); in ah_del_sa()
1233 ah_dump(mblk_t *mp, keysock_in_t *ksi, ipsecah_stack_t *ahstack) in ah_dump() argument
1242 error = sadb_dump(ahstack->ah_pfkey_q, mp, ksi, &ahstack->ah_sadb.s_v4); in ah_dump()
1246 error = sadb_dump(ahstack->ah_pfkey_q, mp, ksi, &ahstack->ah_sadb.s_v6); in ah_dump()
1251 sadb_pfkey_echo(ahstack->ah_pfkey_q, mp, in ah_dump()
1260 ipsecah_stack_t *ahstack) in ah_pfkey_reality_failures() argument
1285 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, EINVAL, in ah_pfkey_reality_failures()
1302 ah_parse_pfkey(mblk_t *mp, ipsecah_stack_t *ahstack) in ah_parse_pfkey() argument
1319 if (!sadb_addrfix(ksi, ahstack->ah_pfkey_q, mp, in ah_parse_pfkey()
1320 ahstack->ipsecah_netstack) || in ah_parse_pfkey()
1321 ah_pfkey_reality_failures(mp, ksi, ahstack)) { in ah_parse_pfkey()
1328 ahstack->ipsecah_netstack); in ah_parse_pfkey()
1330 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, error, in ah_parse_pfkey()
1338 error = ah_del_sa(mp, ksi, &diagnostic, ahstack, in ah_parse_pfkey()
1341 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, error, in ah_parse_pfkey()
1347 error = sadb_delget_sa(mp, ksi, &ahstack->ah_sadb, &diagnostic, in ah_parse_pfkey()
1348 ahstack->ah_pfkey_q, samsg->sadb_msg_type); in ah_parse_pfkey()
1350 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, error, in ah_parse_pfkey()
1356 sadbp_flush(&ahstack->ah_sadb, ahstack->ipsecah_netstack); in ah_parse_pfkey()
1357 sadb_pfkey_echo(ahstack->ah_pfkey_q, mp, samsg, ksi, NULL); in ah_parse_pfkey()
1368 ksi->ks_in_serial, ahstack, msg_getcred(mp, NULL))) { in ah_parse_pfkey()
1376 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, ENOMEM, in ah_parse_pfkey()
1386 error = ah_update_sa(mp, ksi, &diagnostic, ahstack, in ah_parse_pfkey()
1389 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, error, in ah_parse_pfkey()
1398 ah_getspi(mp, ksi, ahstack); in ah_parse_pfkey()
1406 sadb_in_acquire(samsg, &ahstack->ah_sadb, ahstack->ah_pfkey_q, in ah_parse_pfkey()
1407 ahstack->ipsecah_netstack); in ah_parse_pfkey()
1414 ah_dump(mp, ksi, ahstack); in ah_parse_pfkey()
1419 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, EOPNOTSUPP, in ah_parse_pfkey()
1423 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, EINVAL, in ah_parse_pfkey()
1434 ah_keysock_no_socket(mblk_t *mp, ipsecah_stack_t *ahstack) in ah_keysock_no_socket() argument
1455 sadb_in_acquire(samsg, &ahstack->ah_sadb, in ah_keysock_no_socket()
1456 WR(ahstack->ah_pfkey_q), ahstack->ipsecah_netstack); in ah_keysock_no_socket()
1470 ipsecah_stack_t *ahstack = (ipsecah_stack_t *)q->q_ptr; in ipsecah_wput() local
1472 ah3dbg(ahstack, ("In ah_wput().\n")); in ipsecah_wput()
1486 ah1dbg(ahstack, ("Got KEYSOCK_OUT_ERR message.\n")); in ipsecah_wput()
1487 ah_keysock_no_socket(mp, ahstack); in ipsecah_wput()
1490 AH_BUMP_STAT(ahstack, keysock_in); in ipsecah_wput()
1491 ah3dbg(ahstack, ("Got KEYSOCK_IN message.\n")); in ipsecah_wput()
1494 ah_parse_pfkey(mp, ahstack); in ipsecah_wput()
1497 sadb_keysock_hello(&ahstack->ah_pfkey_q, q, mp, in ipsecah_wput()
1498 ah_ager, (void *)ahstack, &ahstack->ah_event, in ipsecah_wput()
1502 ah1dbg(ahstack, ("Got M_CTL from above of 0x%x.\n", in ipsecah_wput()
1513 if (nd_getset(q, ahstack->ipsecah_g_nd, mp)) { in ipsecah_wput()
1532 ah3dbg(ahstack, in ipsecah_wput()
1556 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_set_usetime() local
1577 sp = &ahstack->ah_sadb.s_v6; in ah_set_usetime()
1579 sp = &ahstack->ah_sadb.s_v4; in ah_set_usetime()
1655 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_age_bytes() local
1659 return (sadb_age_bytes(ahstack->ah_pfkey_q, assoc, bytes, in ah_age_bytes()
1677 sp = &ahstack->ah_sadb.s_v6; in ah_age_bytes()
1679 sp = &ahstack->ah_sadb.s_v4; in ah_age_bytes()
1700 return (sadb_age_bytes(ahstack->ah_pfkey_q, inassoc, in ah_age_bytes()
1715 return (sadb_age_bytes(ahstack->ah_pfkey_q, outassoc, in ah_age_bytes()
1720 inrc = sadb_age_bytes(ahstack->ah_pfkey_q, inassoc, bytes, B_TRUE); in ah_age_bytes()
1721 outrc = sadb_age_bytes(ahstack->ah_pfkey_q, outassoc, bytes, B_FALSE); in ah_age_bytes()
1749 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_insert_prop() local
1758 prop->sadb_prop_replay = ahstack->ipsecah_replay_size; in ah_insert_prop()
1817 ahstack->ipsecah_default_soft_bytes; in ah_insert_prop()
1819 ahstack->ipsecah_default_hard_bytes; in ah_insert_prop()
1821 ahstack->ipsecah_default_soft_addtime; in ah_insert_prop()
1823 ahstack->ipsecah_default_hard_addtime; in ah_insert_prop()
1825 ahstack->ipsecah_default_soft_usetime; in ah_insert_prop()
1827 ahstack->ipsecah_default_hard_usetime; in ah_insert_prop()
1846 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_send_acquire() local
1849 AH_BUMP_STAT(ahstack, acquire_requests); in ah_send_acquire()
1851 if (ahstack->ah_pfkey_q == NULL) { in ah_send_acquire()
1887 putnext(ahstack->ah_pfkey_q, extended); in ah_send_acquire()
1889 putnext(ahstack->ah_pfkey_q, pfkeymp); in ah_send_acquire()
1897 ah_getspi(mblk_t *mp, keysock_in_t *ksi, ipsecah_stack_t *ahstack) in ah_getspi() argument
1910 cl_inet_getspi(ahstack->ipsecah_netstack->netstack_stackid, in ah_getspi()
1917 ahstack->ipsecah_netstack, IPPROTO_AH); in ah_getspi()
1920 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, ENOMEM, diagnostic, in ah_getspi()
1924 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, EINVAL, diagnostic, in ah_getspi()
1936 outbound = OUTBOUND_BUCKET_V6(&ahstack->ah_sadb.s_v6, in ah_getspi()
1938 inbound = INBOUND_BUCKET(&ahstack->ah_sadb.s_v6, in ah_getspi()
1941 outbound = OUTBOUND_BUCKET_V4(&ahstack->ah_sadb.s_v4, in ah_getspi()
1943 inbound = INBOUND_BUCKET(&ahstack->ah_sadb.s_v4, in ah_getspi()
1981 newbie->ipsa_hardexpiretime += ahstack->ipsecah_larval_timeout; in ah_getspi()
1993 sadb_pfkey_error(ahstack->ah_pfkey_q, mp, rc, in ah_getspi()
2022 putnext(ahstack->ah_pfkey_q, mp); in ah_getspi()
2032 ah_icmp_error_v6(mblk_t *mp, ip_recv_attr_t *ira, ipsecah_stack_t *ahstack) in ah_icmp_error_v6() argument
2042 ipsec_stack_t *ipss = ahstack->ipsecah_netstack->netstack_ipsec; in ah_icmp_error_v6()
2056 &ahstack->ah_dropper); in ah_icmp_error_v6()
2067 &ahstack->ah_dropper); in ah_icmp_error_v6()
2072 isaf = OUTBOUND_BUCKET_V6(&ahstack->ah_sadb.s_v6, ip6h->ip6_dst); in ah_icmp_error_v6()
2081 if (ahstack->ipsecah_log_unknown_spi) { in ah_icmp_error_v6()
2088 ahstack->ipsecah_netstack); in ah_icmp_error_v6()
2092 &ahstack->ah_dropper); in ah_icmp_error_v6()
2114 &ahstack->ah_dropper); in ah_icmp_error_v6()
2134 ah_icmp_error_v4(mblk_t *mp, ip_recv_attr_t *ira, ipsecah_stack_t *ahstack) in ah_icmp_error_v4() argument
2149 ipsec_stack_t *ipss = ahstack->ipsecah_netstack->netstack_ipsec; in ah_icmp_error_v4()
2164 ipsec_rl_strlog(ahstack->ipsecah_netstack, in ah_icmp_error_v4()
2171 &ahstack->ah_dropper); in ah_icmp_error_v4()
2181 hptr = OUTBOUND_BUCKET_V4(&ahstack->ah_sadb.s_v4, ipha->ipha_dst); in ah_icmp_error_v4()
2190 if (ahstack->ipsecah_log_unknown_spi) { in ah_icmp_error_v4()
2197 ahstack->ipsecah_netstack); in ah_icmp_error_v4()
2201 &ahstack->ah_dropper); in ah_icmp_error_v4()
2240 &ahstack->ah_dropper); in ah_icmp_error_v4()
2265 &ahstack->ah_dropper); in ah_icmp_error_v4()
2305 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ipsecah_icmp_error() local
2308 return (ah_icmp_error_v4(data_mp, ira, ahstack)); in ipsecah_icmp_error()
2310 return (ah_icmp_error_v6(data_mp, ira, ahstack)); in ipsecah_icmp_error()
2549 int ah_data_sz, int ah_align_sz, ipsecah_stack_t *ahstack) in ah_finish_up() argument
2588 ahstack->ipsecah_netstack); in ah_finish_up()
2639 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_log_bad_auth() local
2660 AH_BUMP_STAT(ahstack, bad_auth); in ah_log_bad_auth()
2664 assoc->ipsa_spi, addr, af, ahstack->ipsecah_netstack); in ah_log_bad_auth()
2669 &ahstack->ah_dropper); in ah_log_bad_auth()
2683 ipsecah_stack_t *ahstack; in ah_kcf_callback_outbound() local
2716 ahstack = ns->netstack_ipsecah; in ah_kcf_callback_outbound()
2730 ah1dbg(ahstack, in ah_kcf_callback_outbound()
2733 AH_BUMP_STAT(ahstack, crypto_failures); in ah_kcf_callback_outbound()
2734 AH_BUMP_STAT(ahstack, out_discards); in ah_kcf_callback_outbound()
2738 &ahstack->ah_dropper); in ah_kcf_callback_outbound()
2757 ipsecah_stack_t *ahstack; in ah_kcf_callback_inbound() local
2783 ahstack = ns->netstack_ipsecah; in ah_kcf_callback_inbound()
2797 ah1dbg(ahstack, in ah_kcf_callback_inbound()
2800 AH_BUMP_STAT(ahstack, crypto_failures); in ah_kcf_callback_inbound()
2804 &ahstack->ah_dropper); in ah_kcf_callback_inbound()
2817 ill_t *ill, ipsecah_stack_t *ahstack) in ah_crypto_failed() argument
2819 ipsec_stack_t *ipss = ahstack->ipsecah_netstack->netstack_ipsec; in ah_crypto_failed()
2821 ah1dbg(ahstack, ("crypto failed for %s AH with 0x%x\n", in ah_crypto_failed()
2825 &ahstack->ah_dropper); in ah_crypto_failed()
2826 AH_BUMP_STAT(ahstack, crypto_failures); in ah_crypto_failed()
2830 AH_BUMP_STAT(ahstack, out_discards); in ah_crypto_failed()
2873 ipsecah_stack_t *ahstack; in ah_submit_req_inbound() local
2877 ahstack = ira->ira_ill->ill_ipst->ips_netstack->netstack_ipsecah; in ah_submit_req_inbound()
2925 AH_BUMP_STAT(ahstack, crypto_sync); in ah_submit_req_inbound()
2935 AH_BUMP_STAT(ahstack, crypto_async); in ah_submit_req_inbound()
2939 AH_BUMP_STAT(ahstack, crypto_sync); in ah_submit_req_inbound()
2955 ah_crypto_failed(phdr_mp, B_TRUE, kef_rc, ira->ira_ill, ahstack); in ah_submit_req_inbound()
2971 ipsecah_stack_t *ahstack; in ah_submit_req_outbound() local
2976 ahstack = ill->ill_ipst->ips_netstack->netstack_ipsecah; in ah_submit_req_outbound()
3021 AH_BUMP_STAT(ahstack, crypto_sync); in ah_submit_req_outbound()
3031 AH_BUMP_STAT(ahstack, crypto_async); in ah_submit_req_outbound()
3040 ah_crypto_failed(phdr_mp, B_FALSE, kef_rc, NULL, ahstack); in ah_submit_req_outbound()
3052 uint_t ah_data_sz, boolean_t outbound, ipsecah_stack_t *ahstack) in ah_process_ip_options_v6() argument
3145 assoc, ah_data_sz, ah_align_sz, ahstack)) { in ah_process_ip_options_v6()
3168 uint_t ah_data_sz, boolean_t outbound, ipsecah_stack_t *ahstack) in ah_process_ip_options_v4() argument
3333 ah1dbg(ahstack, ("AH : bad IPv4 option")); in ah_process_ip_options_v4()
3353 assoc, ah_data_sz, ah_align_sz, ahstack)) { in ah_process_ip_options_v4()
3388 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_outbound() local
3401 AH_BUMP_STAT(ahstack, out_requests); in ah_outbound()
3422 &ahstack->ah_dropper); in ah_outbound()
3431 DROPPER(ipss, ipds_ah_nomem), &ahstack->ah_dropper); in ah_outbound()
3463 ahstack->ipsecah_netstack); in ah_outbound()
3484 &length_to_skip, assoc->ipsa_mac_len, B_TRUE, ahstack); in ah_outbound()
3487 &length_to_skip, assoc->ipsa_mac_len, B_TRUE, ahstack); in ah_outbound()
3491 AH_BUMP_STAT(ahstack, out_discards); in ah_outbound()
3494 &ahstack->ah_dropper); in ah_outbound()
3530 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_inbound() local
3547 AH_BUMP_STAT(ahstack, replay_early_failures); in ah_inbound()
3551 &ahstack->ah_dropper); in ah_inbound()
3582 &ahstack->ah_dropper); in ah_inbound()
3594 &length_to_skip, assoc->ipsa_mac_len, B_FALSE, ahstack); in ah_inbound()
3597 &length_to_skip, assoc->ipsa_mac_len, B_FALSE, ahstack); in ah_inbound()
3606 &ahstack->ah_dropper); in ah_inbound()
3643 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_auth_in_done() local
3653 &ahstack->ah_dropper); in ah_auth_in_done()
3662 &ahstack->ah_dropper); in ah_auth_in_done()
3692 ah3dbg(ahstack, ("AH succeeded, checking replay\n")); in ah_auth_in_done()
3693 AH_BUMP_STAT(ahstack, good_auth); in ah_auth_in_done()
3714 AH_BUMP_STAT(ahstack, replay_failures); in ah_auth_in_done()
3718 assoc->ipsa_spi, addr, af, ahstack->ipsecah_netstack); in ah_auth_in_done()
3743 AF_INET, ahstack->ipsecah_netstack); in ah_auth_in_done()
3744 AH_BUMP_STAT(ahstack, bytes_expired); in ah_auth_in_done()
3773 AF_INET6, ahstack->ipsecah_netstack); in ah_auth_in_done()
3774 AH_BUMP_STAT(ahstack, bytes_expired); in ah_auth_in_done()
3835 DROPPER(ipss, ipds_ah_nomem), &ahstack->ah_dropper); in ah_auth_in_done()
3855 &ahstack->ah_dropper); in ah_auth_in_done()
3877 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ah_auth_out_done() local
3888 &ahstack->ah_dropper); in ah_auth_out_done()
3989 ipsecah_stack_t *ahstack = ns->netstack_ipsecah; in ipsecah_in_assocfailure() local
3992 if (ahstack->ipsecah_log_unknown_spi) { in ipsecah_in_assocfailure()
3994 addr, af, ahstack->ipsecah_netstack); in ipsecah_in_assocfailure()
3999 &ahstack->ah_dropper); in ipsecah_in_assocfailure()