Re: IPSec: AH/ESP combination problems

David S. Miller (davem@redhat.com)
Wed, 12 Feb 2003 22:48:06 -0800 (PST)


From: Tom Lendacky <toml@us.ibm.com>
Date: Wed, 12 Feb 2003 17:27:14 -0600

Again I'm not familiar enough with the code at this point
to determine how to get the ESP protocol to be processed
before the AH protocol in this case

You can enforce the ordering exactly when the xfrm templates
are built, this ensures that any fully resolved xfrm state
created from them have the correct ordering as well.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/