RE: pfkeyv2 : proto feild in address extension

-----BEGIN PGP SIGNED MESSAGE-----



The protocol selectors patch (now part of X.509 0.9.21 and 1.1.4) 
implements this now - Stephen Bevan did the work for ths.


On Fri, 7 Feb 2003, Gessler Gerhard wrote:

> Hi,
> 
> we (IABG) did not implement further pfkeyv2 code for handling port and protocal as Pluto (the FreeS/WAN IKE-daemon) was not able to negotiate SAs with that granularity at that time.
> I think Pluto is still only able to do this with an additional patch, if my memory serves.
> 
> Hope this helps,
> 
> 	Gerhard
> 
> --------------------------------------------
> Gerhard Geßler
> 
> Communication Networks, IABG mbH
> Einsteinstr. 20
> 85521 Ottobrunn, Germany
> 
> Telefon: +49 89 6088 - 2021
> Fax: +49 89 6088 - 2845
> 
> E-Mail: [email protected] 
> 
>   > -----Original Message-----
>   > From: [email protected] 
>   > [mailto:[email protected]] 
>   > Sent: Friday, February 07, 2003 1:12 PM
>   > To: [email protected]
>   > Cc: Gessler Gerhard
>   > Subject: [Design] pfkeyv2 : proto feild in address extension
>   > 
>   > 
>   > hi
>   > while trying to add protocol entry into the sadb from used 
>   > space i saw in
>   > the pfkeyv2 code that the proto element within the address 
>   > extension has
>   > not been used.The pf key v2  RFC also gives it  as a MUST 
>   > condition, that
>   > the transport layer protocol should be given within the 
>   > proto feild of the
>   > address extension.
>   > 
>   > i wanted to know why proto field within the address 
>   > extension has not been
>   > used by freeswan to implement protocol level granularity, i 
>   > havent tried
>   > doing this myself yet, so i wanted to enquire if there are 
>   > some problems to
>   > it.
>   > 
>   > thanks and regards.
>   > 
- -- 
Ken Bantoft                The Unoffical FreeS/WAN Site:
[email protected]            http://www.freeswan.ca
                           PGP Key: finger [email protected]
"We can factor the number 15 with quantum computers. We 
can also factor the number 15 with a dog trained to bark 
three times."       -- Robert Harley, 5/12/01, Sci.crypt

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBPkPkE1iWUusaxGxpAQGDWAP/el06BLQY6w4d/7stqJMSmLMi1sOICAPC
UHFtWJ2NEsfvESzRn4VR2WP51CveNsRDZUlTrACFBkrNbd3SkBkNbaFfgU4wXzaO
GCAj/C4DejFFl2SSNFQaVflrHbPOVI10B9LjKkvIhVMhXyzr6KIpzHSdNmmdWw29
VD6VYW3+Qdc=
=liCN
-----END PGP SIGNATURE-----