struct secasindex saidx;
- struct sadb_ident *idents; /* source identity */
- struct sadb_ident *identd; /* destination identity */
- /* XXX I don't know how to use them. */
-
ifnet_t ipsec_if;
u_int outgoing_if;
u_int8_t dir; /* IPSEC_DIR_INBOUND or IPSEC_DIR_OUTBOUND */
struct route_in6 sa_route; /* route cache */
uint16_t flags;
+ u_int32_t use_count;
};
#define MAX_REPLAY_WINDOWS 4
/* replay prevention */
struct secreplay {
+ u_int8_t wsize; /* window size */
u_int32_t count;
- u_int wsize; /* window size, i.g. 4 bytes */
u_int32_t seq; /* used by sender */
u_int32_t lastseq; /* used by sender/receiver */
caddr_t bitmap; /* used by receiver */
// extern void keydb_refsecasvar(struct secasvar *); // not used
// extern void keydb_freesecasvar(struct secasvar *); // not used
/* secreplay */
-extern struct secreplay *keydb_newsecreplay(size_t);
+extern struct secreplay *keydb_newsecreplay(u_int8_t);
extern void keydb_delsecreplay(struct secreplay *);
/* secreg */
// extern struct secreg *keydb_newsecreg(void); // not used