[strongSwan-dev] SPD format in Linux Kernel

[Daniel Migault]

Hi,
Actually, we want to be able to select a Security Policy (SP) when
multiple SPs match the same Traffic Selectors.

Suppose a Mobile Node with Multiple Interfaces I1 and I2  tunnels the
traffic designated by TS. The Mobile Node has one Security Policy SP1
where TS is tunneled in I1 and another Security Policy SP2 where TS is
tunneled in I2.
SPD is ordered, thus either SP1 or SP2 will be selected. How can we
determine which SP is selected? Suppose SP1 is selected we want to
re-order the SPD so SP2 is selected. If SPD is like a list, then
removing SP1 and appending it to the list would fit our goal. Do you
have any recommendation for doing that?

Best Regards,

Daniel



On Mon, Apr 30, 2012 at 6:19 PM, Daniel Migault <mglt.biz at gmail.com> wrote:
> Hi,
>
> I am wondering what is the SPD structure in the Linux Kernel. Is-it an
> ordered list? Any links or documentation would be welcome!
>
> Thanks in advance for your responses,
>
> Daniel
>
> --
> Daniel Migault
> Orange Labs / Security Lab
> +33 (0) 1 45 29 60 52
> +33 (0) 6 70 72 69 58



-- 
Daniel Migault
Orange Labs / Security Lab
+33 (0) 1 45 29 60 52
+33 (0) 6 70 72 69 58