Re: PATCH: IPSEC acquire in presence of multiple managers

[jamal <hadi@xxxxxxxxxx>]

On Fri, 2005-03-25 at 19:58, Herbert Xu wrote:
> On Fri, Mar 25, 2005 at 07:54:31PM -0500, jamal wrote:
> >
> > It seems that we dont support any acquires from userspace to kernel
> 
> I haven't checked af_key but netlink does support that.  All you have
> to do is send messages to the correct multicast group.
> 
> Of course whether any of the KMs actually deal with it is a different
> story :)

What i have seen being described is as follows:

user space app --> kernel
  acquire with all necessary parameters
kernel --> XFRMGRP_ACQURE
  acquire as it would right now with an outbound packet
some KM -->kernel
  SA ADD/UPD
Kernel ---> XFRMGRP_SA (we are working on this, app hears announce) 
  SA ADD/UPD event 

now the SA is in the kernel user space app could point to it via
some SPD like classifier. 

cheers,
jamal