Re: take 2 WAS(Re: PATCH: IPSEC xfrm events

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

On Sat, Apr 02, 2005 at 02:20:01PM -0500, jamal wrote:
> 
> 1) Weve discussed this before Herbert and i think you misspoke that
> pfkey delivers to all listerners.
> 
> pfkey Add/del/upd now really do tell all processes about what happened.
> Before pfkey would skip the originating process. So far this doesnt seem
> to be an issue in the basic testing.

Are you sure? Previously they did BROADCAST_ALL which goes to everyone
including the sender.

> 2) I ended adding a policy_notify to the pfkey manager to make the code
> generic. Interesting thing is i dont think pfkey knows what to do with 
> policy expiration or i am misreading the code.

That's right, pfkey never had policy expire messages.  In general,
anything to do with policies cannot be done portably in pfkey since
the RFC only specified the SA operations.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt