From b4872c1e0963010525ff24c9562e26097fdd0d1b Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 19 Jul 2010 11:25:47 +0200 Subject: Replaced the protocol argument in add_policy with an optional SPI for an AH SA. --- src/libhydra/kernel/kernel_ipsec.h | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'src/libhydra/kernel/kernel_ipsec.h') diff --git a/src/libhydra/kernel/kernel_ipsec.h b/src/libhydra/kernel/kernel_ipsec.h index ad3f64c5d..1a7f7b44d 100644 --- a/src/libhydra/kernel/kernel_ipsec.h +++ b/src/libhydra/kernel/kernel_ipsec.h @@ -258,8 +258,8 @@ struct kernel_ipsec_t { * @param src_ts traffic selector to match traffic source * @param dst_ts traffic selector to match traffic dest * @param direction direction of traffic, POLICY_(IN|OUT|FWD) - * @param spi SPI of SA - * @param protocol protocol to use to protect traffic (AH/ESP) + * @param spi SPI of optional ESP SA + * @param ah_spi SPI of optional AH SA * @param reqid unique ID of an SA to use to enforce policy * @param mark mark for this policy * @param mode mode of SA (tunnel, transport) @@ -273,7 +273,7 @@ struct kernel_ipsec_t { traffic_selector_t *src_ts, traffic_selector_t *dst_ts, policy_dir_t direction, u_int32_t spi, - u_int8_t protocol, u_int32_t reqid, + u_int32_t ah_spi, u_int32_t reqid, mark_t mark, ipsec_mode_t mode, u_int16_t ipcomp, u_int16_t cpi, bool routed); -- cgit v1.2.3