Add IDENTITY payloads to flow establishment (and cleanup accordingly)

-- this will address one of itojun's question on how are IDs for IKE
to be determined (need to add support for this to ipsecadm).

1 files changed, 9 insertions, 1 deletions

diff --git a/sys/netinet/ip_ipsp.h b/sys/netinet/ip_ipsp.h
index 13df8e78727..f0f0854a8df 100644
--- a/sys/netinet/ip_ipsp.h
+++ b/sys/netinet/ip_ipsp.h
@@ -1,4 +1,4 @@
-/*	$OpenBSD: ip_ipsp.h,v 1.71 2000/09/19 08:38:59 angelos Exp $	*/
+/*	$OpenBSD: ip_ipsp.h,v 1.72 2000/09/20 19:13:17 angelos Exp $	*/
 
 /*
  * The authors of this code are John Ioannidis (ji@tla.org),
@@ -183,6 +183,14 @@ struct ipsec_policy
 
     struct tdb          *ipo_tdb;   /* Cached entry */
 
+    u_int16_t            ipo_srcid_len;
+    u_int16_t            ipo_dstid_len;
+    u_int16_t            ipo_srcid_type;
+    u_int16_t            ipo_dstid_type;
+
+    u_int8_t            *ipo_srcid;
+    u_int8_t            *ipo_dstid;
+
     TAILQ_ENTRY(ipsec_policy) ipo_tdb_next; /* List of policies on TDB */
     TAILQ_ENTRY(ipsec_policy) ipo_list; /* List of all policy entries */
 };