Re: IPSec: AH/ESP combination problems

From: David S. Miller (davem@redhat.com)
Date: Thu Feb 13 2003 - 01:48:06 EST


   From: Tom Lendacky <toml@us.ibm.com>
   Date: Wed, 12 Feb 2003 17:27:14 -0600

   Again I'm not familiar enough with the code at this point
   to determine how to get the ESP protocol to be processed
   before the AH protocol in this case

You can enforce the ordering exactly when the xfrm templates
are built, this ensures that any fully resolved xfrm state
created from them have the correct ordering as well.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Feb 15 2003 - 22:00:46 EST