NetBSD/crypto
martin 34255fb043 Pull up following revision(s) (requested by ozaki-r in ticket #1306):
crypto/dist/ipsec-tools/src/setkey/parse.y: revision 1.23
	sys/netipsec/key.c: revision 1.265
	crypto/dist/ipsec-tools/src/setkey/token.l: revision 1.23
	tests/net/ipsec/t_ipsec_misc.sh: revision 1.23

ipsec: fix a regression of the update API

The update API updates an SA by creating a new SA and removing an existing SA.
The previous change removed a newly added SA wrongly if an existing SA had been
created by the getspi API.

setkey: enable to use the getspi API

If a specified SPI is not zero, tell the kernel to use the SPI by using
SADB_EXT_SPIRANGE.  Otherwise, the kernel picks a random SPI.

It enables to mimic racoon.

tests: add tests for getspi and udpate
2019-07-25 08:58:21 +00:00
..
dist/ipsec-tools Pull up following revision(s) (requested by ozaki-r in ticket #1306): 2019-07-25 08:58:21 +00:00
external Pull up following revision(s) (requested by manu in ticket #985): 2018-08-25 14:33:04 +00:00
Makefile.openssl
TODO