[Openswan dev] feedback desired: Forcing CK_PERMANENT to CK_TEMPLATE - new option?
paul at xelerance.com
Tue Aug 10 18:07:06 EDT 2010
On Tue, 10 Aug 2010, Paul Wouters wrote:
> I am contemplating adding an option that tells pluto this conn should be
> treated as a CK_TEMPLATE, eg instantiate=yes, which would just be changing
> the policy inside from CK_PERMANENT to CK_TEMPLATE.
> Does anyone see a problem with this? Or a more elegant solution?
Thinking about it some more, we can probably deduce this, as we know
there is a "vnet:" structure used, so in pluto's add_connection()
we should be able to check for this and set c->kind = CK_TEMPLATE
without needing a new option.
More information about the Dev