92e64a4a0d
to mention here. notable changes are like below. kernel: - make PF_KEY kernel interface more robust against broken input stream. it includes complete internal structure change in sys/netkey/key.c. - remove non-RFC compliant change in PF_KEY API, in particular, in struct sadb_msg. we cannot just change these standard structs. sadb_x_sa2 is introduced instead. - remove prototypes for pfkey_xx functions from /usr/include/net/pfkeyv2.h. these functions are not supplied in /usr/lib. setkey(8): - get/delete does not require "-m mode" (ignored with warning, if you specify it) - spddelete takes direction specification |
||
|---|---|---|
| .. | ||
| Makefile | ||
| ipsec_dump_policy.c | ||
| ipsec_get_policylen.c | ||
| ipsec_set_policy.3 | ||
| ipsec_strerror.3 | ||
| ipsec_strerror.c | ||
| ipsec_strerror.h | ||
| libpfkey.h | ||
| pfkey.c | ||
| pfkey_dump.c | ||
| policy_parse.y | ||
| policy_token.l | ||
| shlib_version | ||