[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: How are Initiator's Proposals checked by Responder?

To: "Jari Arkko" <jari.arkko@kolumbus.fi>
Subject: Re: How are Initiator's Proposals checked by Responder?
From: Bill Sommerfeld <sommerfeld@East.Sun.COM>
Date: Thu, 20 Sep 2001 16:51:32 -0400
cc: sleepy-cat@263.net, ipsec@lists.tislabs.com, "Pravin Kantak" <pravin@intotoinc.com>
In-Reply-To: Your message of "Thu, 20 Sep 2001 07:43:55 +0300." <00b201c1418e$db330540$8a1b6e0a@arenanet.fi>
Reply-to: sommerfeld@East.Sun.COM
Sender: owner-ipsec@lists.tislabs.com

> This is an issue that can be solved either by the duplication of traffic-level
> policy information in both the kernel and user spaces, or by an extension
> to PF_KEY. An extension that I once designed and reported in a now
> expired internet draft can be found below:
> 
> http://www.piuha.net/~jarkko/publications/draft-arkko-pfkey-reference-00.txt

A future solaris release will include a PF_KEY extension along these
lines (we're calling it "inverse acquire").

						- Bill

References:

Re: How are Initiator's Proposals checked by Responder?

From: "Jari Arkko" <jari.arkko@kolumbus.fi>

Prev by Date: Re: Data structure for SPD policies
Next by Date: main mode with signature authentication
Next by thread: Re: inbound vs outbound?
Index(es):
- Main
- Thread