Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Feb 2004 07:31:30 -0800
From:      "Crist J. Clark" <cristjc@comcast.net>
To:        Hajimu UMEMOTO <ume@FreeBSD.org>
Cc:        cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sys/netinet6 in6_pcb.c
Message-ID:  <20040209153130.GA90540@blossom.cjclark.org>
In-Reply-To: <ygeptcorb5y.wl%ume@FreeBSD.org>
References:  <200401271557.i0RFvG4b022293@repoman.freebsd.org> <20040209053427.GA47595@blossom.cjclark.org> <ygeptcorb5y.wl%ume@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Feb 09, 2004 at 03:59:05PM +0900, Hajimu UMEMOTO wrote:
> Hi,
> 
> >>>>> On Sun, 8 Feb 2004 21:34:27 -0800
> >>>>> "Crist J. Clark" <cristjc@comcast.net> said:
> 
> cristjc> On Tue, Jan 27, 2004 at 07:57:16AM -0800, Hajimu UMEMOTO wrote:
> > ume         2004/01/27 07:57:16 PST
> > 
> >   FreeBSD src repository
> > 
> >   Modified files:        (Branch: RELENG_5_2)
> >     sys/netinet6         in6_pcb.c 
> >   Log:
> >   MFC 1.47: call ipsec_pcbconn()/ipsec_pcbdisconn() from in6_pcbconnect().
> >   
> >   Approved by:    re (scott)
> >   
> >   Revision  Changes    Path
> >   1.45.2.1  +7 -0      src/sys/netinet6/in6_pcb.c
> 
> cristjc> FWIW, this prevents an INET6 kernel from building without IPSEC. Of
> cristjc> course, since IPsec is required in IPv6, this may not be a
> cristjc> bug.
> 
> The part where IPSEC is required is enclosed with #ifdef IPSEC.  So, I
> cannot believe that it breaks building without IPSEC.  Please show me
> the error message?

Sorry, there is another dependency. You must have FAST_IPSEC defined
instead of IPSEC. The errors are,

  /usr/src/sys/netinet6/in6_pcb.c: In function `in6_pcbconnect':
  /usr/src/sys/netinet6/in6_pcb.c:410: warning: implicit declaration of function `ipsec_pcbconn'
  /usr/src/sys/netinet6/in6_pcb.c: In function `in6_pcbdisconnect':
  /usr/src/sys/netinet6/in6_pcb.c:425: warning: implicit declaration of function `ipsec_pcbdisconn'

The preprocessor directives at the top set IPSEC when FAST_IPSEC is
true.

So to rephrase, you cannot build INET6 and FAST_IPSEC (which only does
IPv4 IPsec) in the same kernel.
-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040209153130.GA90540>