Date: Sun, 1 Jan 2017 21:24:20 +0000 (UTC) From: "Andrey V. Elsukov" <ae@FreeBSD.org> To: src-committers@freebsd.org, svn-src-projects@freebsd.org Subject: svn commit: r311037 - projects/ipsec/share/man/man4 Message-ID: <201701012124.v01LOKMb004823@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: ae Date: Sun Jan 1 21:24:20 2017 New Revision: 311037 URL: https://svnweb.freebsd.org/changeset/base/311037 Log: Document IP_IPSEC_POLICY and IPV6_IPSEC_POLICY socket options. Modified: projects/ipsec/share/man/man4/ipsec.4 Modified: projects/ipsec/share/man/man4/ipsec.4 ============================================================================== --- projects/ipsec/share/man/man4/ipsec.4 Sun Jan 1 20:56:03 2017 (r311036) +++ projects/ipsec/share/man/man4/ipsec.4 Sun Jan 1 21:24:20 2017 (r311037) @@ -29,7 +29,7 @@ .\" .\" $FreeBSD$ .\" -.Dd November 29, 2009 +.Dd January 1, 2017 .Dt IPSEC 4 .Os .Sh NAME @@ -37,6 +37,7 @@ .Nd Internet Protocol Security protocol .Sh SYNOPSIS .Cd "options IPSEC" +.Cd "options IPSEC_SUPPORT" .Cd "device crypto" .Pp .In sys/types.h @@ -151,6 +152,16 @@ Refer to .Xr setkey 8 on how to use it. .Pp +Depending from the socket's address family, IPPROTO_IP or IPPROTO_IPV6 +transport level and IP_IPSEC_POLICY or IPV6_IPSEC_POLICY socket options +may be used to configure per-socket security policies. +The properly formed IPsec policy specification structure can be +created using +.Xr ipsec_set_policy 3 +function and used as socket option value for +.Xr setsockopt 2 +call. +.Pp When setting policies using the .Xr setkey 8 command, the
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201701012124.v01LOKMb004823>