[Swan-dev] Dear libreswan, I NEED YOUR HELP!

[hongbowang(王洪波)]

dear libreswan:
     I want to remove the klips from kernel to user state. Here are some questions.Thank you!
1. why the sa is four?
2. which two sa is the ipsec sa not IKE sa in these four sa and what other two sa is use for ?

[cid:image001.png at 01D1B20E.D83ABF30]

3. This code in function " setup_half_ipsec_sa ".  what this key use for ? This enckey and authkey is the last encap key ? If it isn't , How does the last key produce using this key? why two sa have this key and have value ,but other two sa is NULL in previous picture?
My english is poor ,thank you for your help. thank you very much.
[cid:image002.png at 01D1B211.B3BAB180]
[cid:image003.png at 01D1B211.B3BAB180]









hongbowang（王洪波）
分机号：0755-86013388-85880
电话：13544015836

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20160520/f2747b8c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 55124 bytes
Desc: image001.png
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20160520/f2747b8c/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 17313 bytes
Desc: image002.png
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20160520/f2747b8c/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 26782 bytes
Desc: image003.png
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20160520/f2747b8c/attachment-0005.png>