(racoon2 49) Re: graceful shutdown

Francis Dupont wrote:
> iked should delete/abort the IKE SA and flush IPsec SA when it is killed,
> i.e., in iked/main.c terminate_iked() I'd like to see the comment:
> 
> 	/* flush IPsec SA ? */
> 
> replaces by the code as the answer to the question is YES!


You mean with Informational exchange and DELTE payload?  I'll add it,
but I was wondering what to do if a peer connection is down.  Perhaps,
try DELETE for first SIGINT, and if SIGINT is received twice,
immediately delete all SAs and exit?  Or, try DELETE with SIGTERM, and
immediately exit with SIGINT?


					FUKUMOTO Atsushi
					[email protected]