Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f6ed0ec0 authored by Shinta Sugimoto's avatar Shinta Sugimoto Committed by David S. Miller
Browse files

[PFKEYV2]: CONFIG_NET_KEY_MIGRATE option 



Add CONFIG_NET_KEY_MIGRATE option which makes it possible for user
application to send or receive MIGRATE message to/from PF_KEY socket.

Signed-off-by: default avatarShinta Sugimoto <shinta.sugimoto@ericsson.com>
Signed-off-by: default avatarMasahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: default avatarYOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 08de61be

net/xfrm/Kconfig

+15 −0
Original line number Diff line number Diff line
@@ -45,4 +45,19 @@ config NET_KEY 


	  Say Y unless you know what you are doing.



config NET_KEY_MIGRATE

	bool "PF_KEY MIGRATE (EXPERIMENTAL)"

	depends on NET_KEY && EXPERIMENTAL

	select XFRM_MIGRATE

	---help---

	  Add a PF_KEY MIGRATE message to PF_KEYv2 socket family.

	  The PF_KEY MIGRATE message is used to dynamically update

	  locator(s) of a given IPsec security association.

	  This feature is required, for instance, in a Mobile IPv6

	  environment with IPsec configuration where mobile nodes

	  change their attachment point to the Internet.  Detail

	  information can be found in the internet-draft

	  <draft-sugimoto-mip6-pfkey-migrate>.



	  If unsure, say N.