Struct:ttChildSaInfo

 
#include trsecapi.h
 
typedef struct tsChildSaInfo
{
    struct tsPolicyEntry TM_FAR *   chdPlcyPtr;
    struct tsPolicyContent TM_FAR * chdPlcyContentPtr;
    struct tsIpsecSelector          chdPacketSelector;
    ttSadbRecordPtr                 chdRekeySaPtr;
    ttUser32Bit                     chdMySpi; /*in host order*/
    ttUser32Bit                     chdPeerSpi;
    ttUser32Bit                     chdLifetimeSeconds;
    ttUser32Bit                     chdLifetimeKbytes;
    ttUser16Bit                     chdAuthKeyBytes;
    ttUser16Bit                     chdEncryptKeyBytes;
}
ttChildSaInfo;
 

Structure Description

ttChildSaInfo has most information to construct an IPsec SA. If manually building SA, the user is responsible for building this structure first. If IKE is used to build SA, IKE is responsible for building this structure.

Members

• chdPlcyPtr

  Pointer to the policy used

• chdPlcyContentPtr

  Pointer to the policy content used. A policy may have bundled policy contents. Each policy content results in a separate SA.

• chdPacketSelector

  Selector for the SA to be built. For IKE, IKE will generate this selector according to the information of policy rule flags and the triggering packet. For manual method, the user is responsible for building this selector. For example, if policy specifies to use packet value for protocol, then chdPacketSelector.selProtocol can NOT be TM_SELECTOR_WILD_PROTOCOL.

• chdRekeySaPtr

  Points to the IPsec SA which is going to be re-keyed.

• chdMySpi

  If the SA to be built is an inbound SA, use this SPI (which is picked by the local side itself). This value is in host order.

• chdPeerSpi

  If the SA to be built is an outbound SA, use this SPI (which is picked by the peer). In host order.

• chdLifetimeSeconds

  Indicates how many key bytes used for authentication algorithm

• chdLifetimeKbytes

  Indicates how many key bytes used for encryption algorithm

• chdAuthKeyBytes

  Indicates the lifetime in seconds.

• chdEncryptKeyBytes

  Indicates the lifetime in Kbytes.