Re: [PATCH] IPSec protocol application order

David S. Miller (davem@redhat.com)
Wed, 19 Feb 2003 13:39:06 -0800 (PST)


From: "Tom Lendacky" <toml@us.ibm.com>
Date: Wed, 19 Feb 2003 15:48:14 -0600

So if you would prefer to not do this in the kernel you can ignore
the patch, but then the setkey application needs to be fixed.

In one sense yes, but in another no.

setkey is for manual keying and debugging. Therefore, disallowing
experimenting with non-rfc-compliant orderings seems to lack purpose
to me.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/