NetBSD/crypto/dist/ipsec-tools
martin 34255fb043 Pull up following revision(s) (requested by ozaki-r in ticket #1306):
crypto/dist/ipsec-tools/src/setkey/parse.y: revision 1.23
	sys/netipsec/key.c: revision 1.265
	crypto/dist/ipsec-tools/src/setkey/token.l: revision 1.23
	tests/net/ipsec/t_ipsec_misc.sh: revision 1.23

ipsec: fix a regression of the update API

The update API updates an SA by creating a new SA and removing an existing SA.
The previous change removed a newly added SA wrongly if an existing SA had been
created by the getspi API.

setkey: enable to use the getspi API

If a specified SPI is not zero, tell the kernel to use the SPI by using
SADB_EXT_SPIRANGE.  Otherwise, the kernel picks a random SPI.

It enables to mimic racoon.

tests: add tests for getspi and udpate
2019-07-25 08:58:21 +00:00
..
misc Autogenerate ChangeLog from NetBSD CVS. Put sourceforge.net changes to 2009-01-20 14:36:07 +00:00
rpm
src Pull up following revision(s) (requested by ozaki-r in ticket #1306): 2019-07-25 08:58:21 +00:00
.cvsignore
ChangeLog.old Fight the ever-increasing size of src checkouts by spelling "useful" 2010-02-28 15:52:16 +00:00
Makefile.am Autogenerate ChangeLog from NetBSD CVS. Put sourceforge.net changes to 2009-01-20 14:36:07 +00:00
NEWS Update NEWS with major changes since 0.7 release. 2009-01-23 09:40:56 +00:00
README Update README 2008-12-16 06:48:38 +00:00
acracoon.m4
bootstrap
configure.ac Add an option --enable-wildcard-match to enable wildcard matching and explain 2013-06-20 15:41:18 +00:00
netbsd-import.sh Convert TNF licenses to new 2 clause variant 2008-04-30 13:10:46 +00:00
package_version.h.in

README

IPsec-tools
===========

This package provides a way to use the native IPsec functionality 
in the Linux 2.6+ kernel. It works as well on NetBSD and FreeBSD.

	- libipsec, a PF_KEYv2 library
	- setkey, a tool to directly manipulate policies and SAs
	- racoon, an IKEv1 keying daemon

IPsec-tools were ported to Linux from the KAME project 
(http://www.kame.net) by Derek Atkins  <derek@ihtfp.com>.

Currently the package is actively maintained and developed by: 
	Emmanuel Dreyfus <manu@netbsd.org>
	VANHULLEBUS Yvan <vanhu@free.fr>
	Matthew Grooms <mgrooms@shrew.net>
	Timo Teräs <timo.teras@iki.fi>

Sources can be found at the IPsec-Tools home page at:
	http://ipsec-tools.sourceforge.net/

And CVS repository is hosted at NetBSD tree:
	cvs -danoncvs@anoncvs.netbsd.org:/cvsroot co ipsec-tools

Bug reports and project wiki is located at:
	https://trac.ipsec-tools.net/

Please report any problems to the mailing list:
	ipsec-tools-devel@lists.sourceforge.net
	ipsec-tools-users@lists.sourceforge.net

You can also browse the list archive:
	http://sf.net/mailarchive/forum.php?forum_name=ipsec-tools-devel

Credits:
	IHTFP Consulting, see http://www.ihtfp.com/
	SUSE Linux AG, see http://www.suse.com/