Defined functions in the kernel interface to flush SAD and SPD entries.

2011-10-21 14:18:23 +02:00
parent bf3c2dde68
commit 0b0f466bbc
3 changed files with 50 additions and 0 deletions
@@ -305,6 +305,13 @@ struct kernel_ipsec_t {
 						u_int32_t spi, u_int8_t protocol, u_int16_t cpi,
 						mark_t mark);

+	/**
+	 * Flush all SAs from the SAD.
+	 *
+	 * @return				SUCCESS if operation completed
+	 */
+	status_t (*flush_sas) (kernel_ipsec_t *this);
+
 	/**
 	 * Add a policy to the SPD.
 	 *
@@ -372,6 +379,13 @@ struct kernel_ipsec_t {
 							policy_dir_t direction, u_int32_t reqid,
 							mark_t mark, policy_priority_t priority);

+	/**
+	 * Flush all policies from the SPD.
+	 *
+	 * @return				SUCCESS if operation completed
+	 */
+	status_t (*flush_policies) (kernel_ipsec_t *this);
+
 	/**
 	 * Install a bypass policy for the given socket.
 	 *