On Mon, Aug 01, 2005 at 10:41:33AM +0200, Krzysztof Oledzki wrote: > > RFC 2408 says: "A protocol implementation SHOULD begin using the newly > created SA for outbound traffic and SHOULD continue to support incoming > traffic on the old SA until it is deleted or until traffic is received > under the protection of the newly created SA." - Section 4.3. > > The problem is the word SHOULD and IMHO both Linux and peer are buggy.
The protocol implementation is made up of a kernel component as well as a user-space component. IMHO this should be done where it's easiest. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
