[Openswan dev] [PATCH] Use ip xfrm in preference to setkey

Paul Wouters paul at xelerance.com
Sat Mar 12 15:56:32 CET 2005

On Sat, 12 Mar 2005, Herbert Xu wrote:

> Now that ip xfrm support has been around for a while, it's time to
> use that in preference to setkey(8) since iproute2 is installed on
> a lot more machines.
> This patch uses ip xfrm if it's available.  Otherwise it uses
> setkey as we do now.

Excellent! This is really good news since with this patch we
no longer depend on setkey and thus ipsectools anymore.

Am I right that this would require iproute2 >= 2.6.8-ss040730 ?


"At best it is a theory, at worst a fantasy" -- Michael Crichton

More information about the Dev mailing list