Date: Tue, 20 Nov 2001 04:26:14 -0800 (PST) From: Hajimu UMEMOTO <ume@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet6 ipsec.c src/sys/netkey key.c key_debug.c key_debug.h key_var.h keysock.c Message-ID: <200111201226.fAKCQEN64508@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
ume 2001/11/20 04:26:14 PST
Modified files: (Branch: RELENG_4)
sys/netinet6 ipsec.c
sys/netkey key.c key_debug.c key_debug.h key_var.h
keysock.c
Log:
MFC:
- net.inet.ipsec.esp_auth hasn't been there
- nuke all debug printfs, which are unneeded by now.
- get rid of #ifdef IPSEC_DEBUG in headers
- now that key_debug_level is always defined, there's no need for
#ifdef IPSEC_DEBUG around sysctl MIB code (net.key.debug).
- switch all debug printf() to ipseclog().
- When there is no suitable inbound policy for the packet of the ipsec
tunnel mode, the kernel never decapsulate the tunneled packet
as the ipsec tunnel mode even when the system wide policy is "none".
Then the kernel leaves the generic tunnel module to process this
packet. If there is no rule of the generic tunnel, the packet
is rejected and the statistics will be counted up.
sys/netinet6/ipsec.c: 1.14
sys/netkey/key.c: 1.32-1.35
sys/netkey/key_debug.c: 1.16
sys/netkey/key_debug.h: 1.8
sys/netkey/key_var.h: 1.5
sys/netkey/keysock.c: 1.8
Revision Changes Path
1.3.2.9 +8 -0 src/sys/netinet6/ipsec.c
1.16.2.10 +219 -455 src/sys/netkey/key.c
1.10.2.4 +0 -4 src/sys/netkey/key_debug.c
1.5.2.3 +5 -12 src/sys/netkey/key_debug.h
1.2.2.3 +3 -32 src/sys/netkey/key_var.h
1.1.2.3 +2 -23 src/sys/netkey/keysock.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200111201226.fAKCQEN64508>