20570d493e
This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net |
||
|---|---|---|
| .. | ||
| ipsec_dump_policy.c | ||
| ipsec_get_policylen.c | ||
| ipsec_set_policy.3 | ||
| ipsec_strerror.3 | ||
| ipsec_strerror.c | ||
| ipsec_strerror.h | ||
| libpfkey.h | ||
| Makefile | ||
| pfkey_dump.c | ||
| pfkey.c | ||
| policy_parse.y | ||
| policy_token.l | ||
| test-policy.c | ||