Re: [PATCH] IPSec protocol application order

[Tom Lendacky]

>> The IPSec RFC (2401) and IPComp RFC (3173) specify the order in which
>> the COMP, ESP and AH protocols must be applied when being applied in
>> transport mode.  Specifically, COMP must be applied first, then ESP
>> and then AH.  Also, transport mode protocols must be applied before
>> tunnel mode protocols.

> Did you even read the email from Alexey yesterday that described
> why none of this is a kernel issue and we merely do exactly what
> the user application tells us to do when it uploads key configuration?

> Just like you aparently ignored his email, I will ignore your patch.

Yes, I read Alexey's email.  He said that it is not a kernel or a setkey
issue.  One of them is responsible for making sure the proper order is set
in order to insure RFC conformance and interoperability.  You are saying
that it is up to the user application, which would be setkey.  So if you
would prefer to not do this in the kernel you can ignore the patch, but
then the setkey application needs to be fixed.

Tom