Module Name: src Committed By: ozaki-r Date: Thu Apr 6 09:20:07 UTC 2017
Modified Files: src/sys/net: if.c src/sys/netipsec: ipsec.c ipsec.h ipsec_input.c ipsec_netbsd.c ipsec_output.c key.c key_debug.c xform_ah.c xform_esp.c xform_ipcomp.c xform_ipip.c xform_tcp.c Log Message: Prepare netipsec for rump-ification - Include "opt_*.h" only if _KERNEL_OPT is defined - Allow encapinit to be called twice (by ifinit and ipe4_attach) - ifinit didn't call encapinit if IPSEC is enabled (ipe4_attach called it instead), however, on a rump kernel ipe4_attach may not be called even if IPSEC is enabled. So we need to allow ifinit to call it anyway - Setup sysctls in ipsec_attach explicitly instead of using SYSCTL_SETUP - Call ip6flow_invalidate_all in key_spdadd only if in6_present - It's possible that a rump kernel loads the ipsec library but not the inet6 library To generate a diff of this commit: cvs rdiff -u -r1.391 -r1.392 src/sys/net/if.c cvs rdiff -u -r1.70 -r1.71 src/sys/netipsec/ipsec.c cvs rdiff -u -r1.38 -r1.39 src/sys/netipsec/ipsec.h cvs rdiff -u -r1.37 -r1.38 src/sys/netipsec/ipsec_input.c cvs rdiff -u -r1.39 -r1.40 src/sys/netipsec/ipsec_netbsd.c cvs rdiff -u -r1.41 -r1.42 src/sys/netipsec/ipsec_output.c cvs rdiff -u -r1.103 -r1.104 src/sys/netipsec/key.c cvs rdiff -u -r1.13 -r1.14 src/sys/netipsec/key_debug.c cvs rdiff -u -r1.44 -r1.45 src/sys/netipsec/xform_ah.c cvs rdiff -u -r1.46 -r1.47 src/sys/netipsec/xform_esp.c cvs rdiff -u -r1.31 -r1.32 src/sys/netipsec/xform_ipcomp.c cvs rdiff -u -r1.42 -r1.43 src/sys/netipsec/xform_ipip.c cvs rdiff -u -r1.8 -r1.9 src/sys/netipsec/xform_tcp.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.