The IPsec Tunnel Reform project is now available on OpenSolaris. Some parts of Tunnel Reform (mainly IKE) are still closed-source, alas, but the parts that are open (all of the rest) are all available on OpenSolaris.
Anyone interested in seeing more IPsec internals, or those who are interested in porting their own Key Management daemon to OpenSolaris should definitely check out the project page: http://www.opensolaris.org/os/project/tref/ This announcement (in its original form) is at: http://www.opensolaris.org/os/project/tref/announcements/#2006-07-14_Tunnel_Reform_project_now_open And I've an accompanying blog entry also: http://blogs.sun.com/roller/page/danmcd?entry=tunnel_reform_now_open_for Please review what's there (design document, code snapshot), because while we aren't done yet, we're getting there! Thanks! Dan & Paul