1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

// SPDX-License-Identifier: Apache-2.0

use crate::{
    BaseInterface, MacSecConfig, MacSecInterface, MacSecOffload, MacSecValidate,
};

impl From<nispor::MacSecValidate> for MacSecValidate {
    fn from(v: nispor::MacSecValidate) -> Self {
        match v {
            nispor::MacSecValidate::Disabled => Self::Disabled,
            nispor::MacSecValidate::Check => Self::Check,
            nispor::MacSecValidate::Strict => Self::Strict,
            _ => {
                log::warn!("Unknown MACsec validate mode {:?}", v);
                Self::default()
            }
        }
    }
}

impl From<nispor::MacSecOffload> for MacSecOffload {
    fn from(v: nispor::MacSecOffload) -> Self {
        match v {
            nispor::MacSecOffload::Off => Self::Off,
            nispor::MacSecOffload::Phy => Self::Phy,
            nispor::MacSecOffload::Mac => Self::Mac,
            _ => {
                log::warn!("Unknown MACsec offload mode {:?}", v);
                Self::default()
            }
        }
    }
}

pub(crate) fn np_macsec_to_nmstate(
    np_iface: &nispor::Iface,
    base_iface: BaseInterface,
) -> MacSecInterface {
    let macsec_conf =
        np_iface.macsec.as_ref().map(|np_macsec_info| MacSecConfig {
            encrypt: np_macsec_info.encrypt,
            port: np_macsec_info.port.into(),
            validation: np_macsec_info.validate.into(),
            send_sci: np_macsec_info.send_sci,
            base_iface: np_macsec_info.base_iface.clone().unwrap_or_default(),
            mka_cak: None,
            mka_ckn: None,
            offload: Some(np_macsec_info.offload.into()),
        });

    MacSecInterface {
        base: base_iface,
        macsec: macsec_conf,
    }
}