LinusWatch: Crypto API and IPSec merged

LinusWatch: Crypto API and IPSec merged

Posted Oct 30, 2002 2:45 UTC (Wed) by hisdad (subscriber, #5375)
Parent article: LinusWatch: Crypto API and IPSec merged

The problem has been that because of cypto export issues, ipsec was not in the kernel. Instead an external project, freeswan, produced a large patch to add this capability. Then there is another patch to support X509 certs, as used in Win2K.

Freeswan as a patch is pretty horrifying. By bringing this into the kernel we get a clean implementation of a very good VPN system.

Ipsec is also required to fully support IPV6. This is the key issue.
Being able to run crypto filesystems is great, but almost of secondary importance.

My opinion,
Regards
Dad

---

(Log in to post comments)