diff options
| author | ozaki-r <ozaki-r@NetBSD.org> | 2019-07-23 04:32:06 +0000 |
|---|---|---|
| committer | ozaki-r <ozaki-r@NetBSD.org> | 2019-07-23 04:32:06 +0000 |
| commit | e5ce58a433e238925a7eec20985fb75e4e5bfd1a (patch) | |
| tree | 65d2c8d4b82cfb92bc117ff69a3ed89c6aad4a6e | |
| parent | 33a0960bf143d48ce343ad02f1f69e99b2bcb6e9 (diff) | |
setkey: document getspi and update
| -rw-r--r-- | crypto/dist/ipsec-tools/src/setkey/setkey.8 | 22 |
1 files changed, 20 insertions, 2 deletions
diff --git a/crypto/dist/ipsec-tools/src/setkey/setkey.8 b/crypto/dist/ipsec-tools/src/setkey/setkey.8 index f2dc967f733..5b293ac32ec 100644 --- a/crypto/dist/ipsec-tools/src/setkey/setkey.8 +++ b/crypto/dist/ipsec-tools/src/setkey/setkey.8 @@ -1,4 +1,4 @@ -.\" $NetBSD: setkey.8,v 1.35 2018/11/19 04:54:37 ozaki-r Exp $ +.\" $NetBSD: setkey.8,v 1.36 2019/07/23 04:32:06 ozaki-r Exp $ .\" .\" Copyright (C) 1995, 1996, 1997, 1998, and 1999 WIDE Project. .\" All rights reserved. @@ -27,7 +27,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd November 19, 2018 +.Dd July 23, 2019 .Dt SETKEY 8 .Os .\" @@ -167,6 +167,24 @@ Add an SAD entry. can fail for multiple reasons, including when the key length does not match the specified algorithm. .\" +.It Cm getspi Oo Fl 46n Oc Ar src Ar dst Ar protocol Ar spi \ +Oo Ar extensions Oc Li ; +Add a larval SAD entry. +If +.Ar spi +is not zero, tell the kernel use the SPI as-is. +Otherwise, the kernel picks a random SPI. +.\" +.It Cm update Oo Fl 46n Oc Ar src Ar dst Ar protocol Ar spi \ +Oo Ar extensions Oc Ar algorithm ... Li ; +Update an existing SAD entry. +It must be used together with +.Cm add +or +.Cm getspi +in a series of operations because the API requires that a process +updating an SAD entry is the same as one created the SAD entry. +.\" .It Cm get Oo Fl 46n Oc Ar src Ar dst Ar protocol Ar spi Li ; Show an SAD entry. .\" |
