[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(usagi-users 03145) Re: [Ipsec-tools-devel] How to send additional data from kernel to racoon?



On Tue, 23 Nov 2004, Park Lee wrote:

> On Tue, 23 Nov 2004 at 12:13, Michal Ludvig wrote:
> > I haven't closely followed the thread but ... how about moving from 
> > PF_KEY to NetLink in IPsec-tools on Linux? NetLink messages are 
> > more versatile I think and could better suit Park's requirements. But 
> > it's just my feeling, 
> > I don't know too much about NetLink either ;-)
>  
> Thank you.

> Now, I still want to add a new extension in PF_KEY (RFC2367) in Linux 
> 2.6. But I wouldn't find any useful information about how to do it on 
> web.
> Would you please give me some hints on how to define a new extension in 
> PF_KEY (RFC2367) in Linux 2.6 and How to attach it to a message (such as 
> SADB_ACQUIRE message)?

I don't know, never did it. I'd say "read the sources" but you probably 
don't want to hear such answer...

I'm afraid your eventual extensions to the Linux PF_KEY wouldn't be 
accepted into mainline anyway. NetLink is the prefered way of doing such 
things, AFAIK.

Michal Ludvig
-- 
* A mouse is a device used to point at the xterm you want to type in.
* Personal homepage - http://www.logix.cz/michal