[Openswan dev] how to test netkey with uml tests

Paul Wouters paul at xelerance.com
Fri Jan 11 05:53:28 EST 2008


On Thu, 10 Jan 2008, Michael Richardson wrote:

> All of the build parts could be automated, however that won't let you
> run netkey kernel with pluto automated tests.  What remains to be done
> is that "ipsec eroute" needs to understand how to do netlink messages to
> get essentially the same format output as for KLIPS, and ditto for
> "ipsec spi" (if you want to run the kernel-only tests).

ip xfrm state
ip xfrm policy
(ip xfrm monitor)

It would need to get massages into the same format as eroute. Or we
have to come up with a unified format. The important thing is to have
one line per Child SA (like eroute now does), the thing missing from
eroute today is the connection name in userland belonging to the eroute.

Paul


More information about the Dev mailing list