tfPolicyValidate

Table of Contents >> IPsec/IKE Programmer's Reference >> IPsec/IKE Function Reference

#include <trsocket.h>

int tfPolicyValidate

(ttPolicyEntryPtr plcyPtr);

Function Description

Proposals and transforms are stored in a list of ttPolicyContent structures which does not account for offer requirements (proposal vs. transform). This function walks the list of transforms and validates that the end result is a valid offer. When Treck IKE walks the list to build the offer, knowing the number of proposals and the number of transforms / proposal simplifies the logic required to update the next payload info within the offer packet. Because validation requires a complete walk through, this information is also updated for this later use.

When this function succeeds, the policy is enabled for IPsec use. If it does not, the policy is invalid and will not be used in processing.

Note:

When validating manual policies, this function checks to insure that there is a valid SA for each policy content.

Parameters

• plcyPtr

  Holds the policy entry, the head of the list.

Returns

• TM_ENOERROR

  Success. Valid offer, updated counts, enabled policy.

• TM_EINVAL

  Failure. Offer not supported, disabled policy.

Table of Contents >> IPsec/IKE Programmer's Reference >> IPsec/IKE Function Reference