[Openswan dev] ocf debian

[Harald Jenny]

On Sat, Dec 18, 2010 at 01:56:53PM +1000, David McCullough wrote:
> 
> Jivin Harald Jenny lays it down ...
> ...
> > > We could also try and have the initscripts look for OCF hardware and load the
> > > right driver. Or just trust the user to specify this in ipsec.conf and load
> > > it?
> > 
> > Hmmm I slowly come to the conclusion that we might remove the cryptoapi and
> > internal crypto code in favour of just OCF when this automatically uses the
> > cryptoapi code if no crypt-hardware is present...
> 
> 
> No,  I would never remove the klips cryptoapi support.  It needs some
> cleanups and extra functionality added,  but IMO it must stay.

Ok

> 
> > > Does the order of loading matter for klips? I don't think so, and I believe you
> > > can load/unload any OCF driver while the SA keeps running?
> > 
> > Oh that would be very cool.
> 
> Cheers,
> Davidm

Kind regards
Harald

> 
> -- 
> David McCullough,      david_mccullough at mcafee.com,  Ph:+61 734352815
> McAfee - SnapGear      http://www.mcafee.com         http://www.uCdot.org