[Openswan Users] NETKEY SA lifetime

[Herbert Xu]

On Tue, Feb 06, 2007 at 04:55:17PM +0100, Paul Wouters wrote:
> 
> Here you can see the ike_life, ipsec_life and the rekey margin/fuzz.
> I am not sure why hard/soft is not set with those values. Perhaps it is
> something else? Perhaps Herbert or Michael can shed some more light on this.

We don't use the kernel lifetime timers with Openswan.  Instead
we rely on Openswan to replace the SA when the time comes.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt