Re: PF_KEY socket code examples

[Parijat Mishra <parijat@cwc.nus.edu.sg>]

On Sunday 05 May 2002 14:03, rob frohwein wrote:
  > Does anyone maybe has some code examples that demonstrate
  > how to specify and read SPDs and SAa via socket( ....,PFKEY) ??

The PFKEY interface as specified in RFC2367 only allows one to 
read/write to the SADB, not SPD. However, some IPSec implementations 
have created extensions to allow the specification of SPD entries as 
well.

In any case, good starting points would be the FreeS/WAN project 
(www.freeswan.org) and the IPSec implementation withing the USAGI 
project (www.linux-ipv6.org).  Both contain extensions to the base 
PFKEY interface to deal with SPDs, SA groups and stuff, and differ 
from each other.  Another place should be the KAME project's 
implementation -- but I am not a BSD user and do not know much about 
it.

-- 
Sincerely,
Parijat Mishra
R & D Engineer,
Institute for Communications Research
Tel: (65)68709353