[strongSwan] TSi, TSr narrow down by external authorization process

[SunilVasanta]

Hi ,

Is it possible to send out traffic selectors  values TSi,TSr   to other 
process (Authorization process) for TS narrow down.

I'm trying to modify Charon code to send out TSi, TSr values received in 
create child SA  to a authorization process to narrow down traffic 
selectors. The authentication process will receive
configured/allow traffic selector value for a user from policy server .

Authorization process will match the TSi and TSr values proposed against 
TSi, TSr value received from policy server, matched traffic selectors 
are sent back to Charon process so that it can configure Security policy 
datebase(SPD)  and send matched traffic selector to client.

Is there any way to configure strongswan charon process to achieve above 
functionality.


Thanks,
Sunil Vasanta
Sawridgesystems