HomeFreeBSD

if_ovpn: remove incorrect rounding up of packet sizes

Description

if_ovpn: remove incorrect rounding up of packet sizes

The ciphers used by OpenVPN (DCO) do not require data to be block-sized.
Do not round up to AES_BLOCK_LEN, as this can lead to issues with
fragmented packets.

Reported by: Gert Doering <gert@greenie.muc.de>
Sponsored by: Rubicon Communications, LLC ("Netgate")

Details

Provenance
kpAuthored on Sep 21 2022, 10:17 AM
Parents
rG8ea48fc59eaf: LinuxKPI: device.h remove duplicate #include
Branches
Unknown
Tags
Unknown