Re: [Design] We should name conn's begining with underscore

-----BEGIN PGP SIGNED MESSAGE----- >> DHR says:
> Actually, I think that the current behaviour works well.

  Yes, it works in the same brittle way that way too many Linux subsystems do, and when it fails it fails both insecurely and worse silently.

  If the use does NOT want OE they must really work at it, say by turning the whole OE conn off with a long conn entry (at least TWO lines of text!) in ipsec.conf, NOT by a single character typo.

  The whole point of 2.00 was that ALL that was needed was the right keying information, and that if that and ONLY that were in place OE would run.

  Finish building that, your only a brick away.

		||ugh Daniel
		hugh@freeswan.org

			Systems Testing & Project mis-Management
			The Linux FreeS/WAN Project
			
http://www.freeswan.org

-----BEGIN PGP SIGNATURE-----

Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBPlAVx1ZpdJR7FBQRAQEWMwQAxHDxziW0po0V7/QFt9p1utf64BBLfbfc tI9LG0LjF42DioPTm5/vcc2+p4wALAgEHa+JyNPFQ7xrIUvChzCUg8kwy60hw8H9 yr/TcmsxAMlKOt55DmWN7ych+SbUZpnOQwWMnmDNnKv/gMIoJAzCOg3oVnCIpUCT r6b6Ng0+sRY=
=i+vl
-----END PGP SIGNATURE-----