(usagi-users 02767) Re: IPsec support for SCTP

[Kazunori Miyazawa <kazunori@xxxxxxxxxxxx>]

Hello,

I roughly read the codes now. I guess linux-2.6 probably supports the first 
half of section 2 in RFC3554(I have not tested this yet). linux-2.6 finds SA 
in ip_route_output and IPsec processs works after ip_queue_xmit. We should 
change ip6_route_output to ip6_dst_lookup in net/sctp/ipv6.c.

In the second half, RFC3554 wants IPsec stack to support sets of the addresses 
which are used by SCTP. However linux-2.6 can not support this requirement 
now.

I think linux-2.6 does not support full feature of RFC3554.
USAGI stack also does not support full feature of RFC3554.

2004/01/14(水) 08:22、Craig, Dave さんは書きました:
> I was looking through USAGI FAQ and the sources from CVS head and
> haven't found any evidence of IPsec supporting SCTP as described in RFC
> 3554.  I'm still getting up to speed on the XFRM code, so it is
> conceivable that I have yet to find it.  Anyone know off hand?
>
>
>

--Kazunori Miyazawa