From e49abcede093ded4d11de88a6d0c25f003c9771e Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Fri, 24 Feb 2012 11:07:34 +0100 Subject: Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. --- src/libhydra/kernel/kernel_ipsec.h | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) (limited to 'src/libhydra/kernel/kernel_ipsec.h') diff --git a/src/libhydra/kernel/kernel_ipsec.h b/src/libhydra/kernel/kernel_ipsec.h index 852f0560c..500a77cad 100644 --- a/src/libhydra/kernel/kernel_ipsec.h +++ b/src/libhydra/kernel/kernel_ipsec.h @@ -1,5 +1,5 @@ /* - * Copyright (C) 2006-2011 Tobias Brunner + * Copyright (C) 2006-2012 Tobias Brunner * Copyright (C) 2006 Daniel Roethlisberger * Copyright (C) 2005-2006 Martin Willi * Copyright (C) 2005 Jan Hutter @@ -402,6 +402,17 @@ struct kernel_ipsec_t { */ bool (*bypass_socket)(kernel_ipsec_t *this, int fd, int family); + /** + * Enable decapsulation of ESP-in-UDP packets for the given port/socket. + * + * @param fd socket file descriptor + * @param family protocol family of the socket + * @param port the UDP port + * @return TRUE if UDP decapsulation was enabled successfully + */ + bool (*enable_udp_decap)(kernel_ipsec_t *this, int fd, int family, + u_int16_t port); + /** * Destroy the implementation. */ -- cgit v1.2.3