head 1.6; access; symbols netbsd-10-0-RC6:1.6 netbsd-10-0-RC5:1.6 netbsd-10-0-RC4:1.6 netbsd-10-0-RC3:1.6 netbsd-10-0-RC2:1.6 thorpej-ifq:1.6.0.38 thorpej-ifq-base:1.6 thorpej-altq-separation:1.6.0.36 thorpej-altq-separation-base:1.6 netbsd-10-0-RC1:1.6 netbsd-10:1.6.0.34 netbsd-10-base:1.6 bouyer-sunxi-drm:1.6.0.32 bouyer-sunxi-drm-base:1.6 netbsd-9-3-RELEASE:1.6 thorpej-i2c-spi-conf2:1.6.0.30 thorpej-i2c-spi-conf2-base:1.6 thorpej-futex2:1.6.0.28 thorpej-futex2-base:1.6 thorpej-cfargs2:1.6.0.26 thorpej-cfargs2-base:1.6 cjep_sun2x-base1:1.6 cjep_sun2x:1.6.0.24 cjep_sun2x-base:1.6 cjep_staticlib_x-base1:1.6 netbsd-9-2-RELEASE:1.6 cjep_staticlib_x:1.6.0.22 cjep_staticlib_x-base:1.6 thorpej-i2c-spi-conf:1.6.0.20 thorpej-i2c-spi-conf-base:1.6 thorpej-cfargs:1.6.0.18 thorpej-cfargs-base:1.6 thorpej-futex:1.6.0.16 thorpej-futex-base:1.6 netbsd-9-1-RELEASE:1.6 bouyer-xenpvh-base2:1.6 phil-wifi-20200421:1.6 bouyer-xenpvh-base1:1.6 phil-wifi-20200411:1.6 bouyer-xenpvh:1.6.0.14 bouyer-xenpvh-base:1.6 is-mlppp:1.6.0.12 is-mlppp-base:1.6 phil-wifi-20200406:1.6 netbsd-8-2-RELEASE:1.5.40.1 ad-namecache-base3:1.6 netbsd-9-0-RELEASE:1.6 netbsd-9-0-RC2:1.6 ad-namecache-base2:1.6 ad-namecache-base1:1.6 ad-namecache:1.6.0.10 ad-namecache-base:1.6 netbsd-9-0-RC1:1.6 phil-wifi-20191119:1.6 netbsd-9:1.6.0.8 netbsd-9-base:1.6 phil-wifi-20190609:1.6 netbsd-8-1-RELEASE:1.5.40.1 netbsd-8-1-RC1:1.5.40.1 isaki-audio2:1.6.0.6 isaki-audio2-base:1.6 pgoyette-compat-merge-20190127:1.6 pgoyette-compat-20190127:1.6 pgoyette-compat-20190118:1.6 pgoyette-compat-1226:1.6 pgoyette-compat-1126:1.6 pgoyette-compat-1020:1.6 pgoyette-compat-0930:1.6 pgoyette-compat-0906:1.6 netbsd-7-2-RELEASE:1.5 pgoyette-compat-0728:1.6 netbsd-8-0-RELEASE:1.5.40.1 phil-wifi:1.6.0.4 phil-wifi-base:1.6 pgoyette-compat-0625:1.6 netbsd-8-0-RC2:1.5.40.1 pgoyette-compat-0521:1.6 pgoyette-compat-0502:1.6 pgoyette-compat-0422:1.6 netbsd-8-0-RC1:1.5.40.1 pgoyette-compat-0415:1.6 pgoyette-compat-0407:1.6 pgoyette-compat-0330:1.6 pgoyette-compat-0322:1.6 pgoyette-compat-0315:1.6 netbsd-7-1-2-RELEASE:1.5 pgoyette-compat:1.6.0.2 pgoyette-compat-base:1.6 netbsd-7-1-1-RELEASE:1.5 tls-maxphys-base-20171202:1.5 matt-nb8-mediatek:1.5.0.44 matt-nb8-mediatek-base:1.5 nick-nhusb-base-20170825:1.5 perseant-stdc-iso10646:1.5.0.42 perseant-stdc-iso10646-base:1.5 netbsd-8:1.5.0.40 netbsd-8-base:1.5 prg-localcount2-base3:1.5 prg-localcount2-base2:1.5 prg-localcount2-base1:1.5 prg-localcount2:1.5.0.38 prg-localcount2-base:1.5 pgoyette-localcount-20170426:1.5 bouyer-socketcan-base1:1.5 jdolecek-ncq:1.5.0.36 jdolecek-ncq-base:1.5 pgoyette-localcount-20170320:1.5 netbsd-7-1:1.5.0.34 netbsd-7-1-RELEASE:1.5 netbsd-7-1-RC2:1.5 nick-nhusb-base-20170204:1.5 netbsd-7-nhusb-base-20170116:1.5 bouyer-socketcan:1.5.0.32 bouyer-socketcan-base:1.5 pgoyette-localcount-20170107:1.5 netbsd-7-1-RC1:1.5 nick-nhusb-base-20161204:1.5 pgoyette-localcount-20161104:1.5 netbsd-7-0-2-RELEASE:1.5 nick-nhusb-base-20161004:1.5 localcount-20160914:1.5 netbsd-7-nhusb:1.5.0.30 netbsd-7-nhusb-base:1.5 pgoyette-localcount-20160806:1.5 pgoyette-localcount-20160726:1.5 pgoyette-localcount:1.5.0.28 pgoyette-localcount-base:1.5 nick-nhusb-base-20160907:1.5 nick-nhusb-base-20160529:1.5 netbsd-7-0-1-RELEASE:1.5 nick-nhusb-base-20160422:1.5 nick-nhusb-base-20160319:1.5 nick-nhusb-base-20151226:1.5 netbsd-7-0:1.5.0.26 netbsd-7-0-RELEASE:1.5 nick-nhusb-base-20150921:1.5 netbsd-7-0-RC3:1.5 netbsd-7-0-RC2:1.5 netbsd-7-0-RC1:1.5 nick-nhusb-base-20150606:1.5 nick-nhusb-base-20150406:1.5 nick-nhusb:1.5.0.24 nick-nhusb-base:1.5 netbsd-5-2-3-RELEASE:1.2 netbsd-5-1-5-RELEASE:1.2 netbsd-6-0-6-RELEASE:1.5 netbsd-6-1-5-RELEASE:1.5 netbsd-7:1.5.0.22 netbsd-7-base:1.5 yamt-pagecache-base9:1.5 yamt-pagecache-tag8:1.2.110.1 netbsd-6-1-4-RELEASE:1.5 netbsd-6-0-5-RELEASE:1.5 tls-earlyentropy:1.5.0.20 tls-earlyentropy-base:1.5 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.5 riastradh-drm2-base3:1.5 netbsd-6-1-3-RELEASE:1.5 netbsd-6-0-4-RELEASE:1.5 netbsd-5-2-2-RELEASE:1.2 netbsd-5-1-4-RELEASE:1.2 netbsd-6-1-2-RELEASE:1.5 netbsd-6-0-3-RELEASE:1.5 netbsd-5-2-1-RELEASE:1.2 netbsd-5-1-3-RELEASE:1.2 rmind-smpnet-nbase:1.5 netbsd-6-1-1-RELEASE:1.5 riastradh-drm2-base2:1.5 riastradh-drm2-base1:1.5 riastradh-drm2:1.5.0.18 riastradh-drm2-base:1.5 rmind-smpnet:1.5.0.10 rmind-smpnet-base:1.5 netbsd-6-1:1.5.0.16 netbsd-6-0-2-RELEASE:1.5 netbsd-6-1-RELEASE:1.5 khorben-n900:1.5.0.14 netbsd-6-1-RC4:1.5 netbsd-6-1-RC3:1.5 agc-symver:1.5.0.12 agc-symver-base:1.5 netbsd-6-1-RC2:1.5 netbsd-6-1-RC1:1.5 yamt-pagecache-base8:1.5 netbsd-5-2:1.2.0.116 netbsd-6-0-1-RELEASE:1.5 yamt-pagecache-base7:1.5 netbsd-5-2-RELEASE:1.2 netbsd-5-2-RC1:1.2 matt-nb6-plus-nbase:1.5 yamt-pagecache-base6:1.5 netbsd-6-0:1.5.0.8 netbsd-6-0-RELEASE:1.5 netbsd-6-0-RC2:1.5 tls-maxphys:1.5.0.6 tls-maxphys-base:1.5 matt-nb6-plus:1.5.0.4 matt-nb6-plus-base:1.5 netbsd-6-0-RC1:1.5 jmcneill-usbmp-base10:1.5 yamt-pagecache-base5:1.5 jmcneill-usbmp-base9:1.5 yamt-pagecache-base4:1.5 jmcneill-usbmp-base8:1.5 jmcneill-usbmp-base7:1.5 jmcneill-usbmp-base6:1.5 jmcneill-usbmp-base5:1.5 jmcneill-usbmp-base4:1.5 jmcneill-usbmp-base3:1.5 jmcneill-usbmp-pre-base2:1.2 jmcneill-usbmp-base2:1.5 netbsd-6:1.5.0.2 netbsd-6-base:1.5 netbsd-5-1-2-RELEASE:1.2 netbsd-5-1-1-RELEASE:1.2 jmcneill-usbmp:1.2.0.114 jmcneill-usbmp-base:1.2 jmcneill-audiomp3:1.2.0.112 jmcneill-audiomp3-base:1.2 yamt-pagecache-base3:1.2 yamt-pagecache-base2:1.2 yamt-pagecache:1.2.0.110 yamt-pagecache-base:1.2 rmind-uvmplock-nbase:1.2 cherry-xenmp:1.2.0.108 cherry-xenmp-base:1.2 bouyer-quota2-nbase:1.2 bouyer-quota2:1.2.0.106 bouyer-quota2-base:1.2 jruoho-x86intr:1.2.0.104 jruoho-x86intr-base:1.2 matt-mips64-premerge-20101231:1.2 matt-nb5-mips64-premerge-20101231:1.2 matt-nb5-pq3:1.2.0.102 matt-nb5-pq3-base:1.2 netbsd-5-1:1.2.0.100 netbsd-5-1-RELEASE:1.2 uebayasi-xip-base4:1.2 uebayasi-xip-base3:1.2 yamt-nfs-mp-base11:1.2 netbsd-5-1-RC4:1.2 matt-nb5-mips64-k15:1.2 uebayasi-xip-base2:1.2 yamt-nfs-mp-base10:1.2 netbsd-5-1-RC3:1.2 netbsd-5-1-RC2:1.2 uebayasi-xip-base1:1.2 netbsd-5-1-RC1:1.2 rmind-uvmplock:1.2.0.98 rmind-uvmplock-base:1.2 yamt-nfs-mp-base9:1.2 uebayasi-xip:1.2.0.96 uebayasi-xip-base:1.2 netbsd-5-0-2-RELEASE:1.2 matt-nb5-mips64-premerge-20091211:1.2 matt-premerge-20091211:1.2 yamt-nfs-mp-base8:1.2 matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.2 matt-nb4-mips64-k7-u2a-k9b:1.2 matt-nb5-mips64-u1-k1-k5:1.2 yamt-nfs-mp-base7:1.2 matt-nb5-mips64:1.2.0.94 netbsd-5-0-1-RELEASE:1.2 jymxensuspend-base:1.2 yamt-nfs-mp-base6:1.2 yamt-nfs-mp-base5:1.2 yamt-nfs-mp-base4:1.2 jym-xensuspend-nbase:1.2 yamt-nfs-mp-base3:1.2 nick-hppapmap-base4:1.2 nick-hppapmap-base3:1.2 netbsd-5-0:1.2.0.92 netbsd-5-0-RELEASE:1.2 netbsd-5-0-RC4:1.2 netbsd-5-0-RC3:1.2 nick-hppapmap-base2:1.2 netbsd-5-0-RC2:1.2 jym-xensuspend:1.2.0.90 jym-xensuspend-base:1.2 netbsd-5-0-RC1:1.2 haad-dm-base2:1.2 haad-nbase2:1.2 ad-audiomp2:1.2.0.88 ad-audiomp2-base:1.2 netbsd-5:1.2.0.86 netbsd-5-base:1.2 nick-hppapmap:1.2.0.84 nick-hppapmap-base:1.2 matt-mips64-base2:1.2 matt-mips64:1.2.0.82 haad-dm-base1:1.2 wrstuden-revivesa-base-4:1.2 netbsd-4-0-1-RELEASE:1.2 wrstuden-revivesa-base-3:1.2 wrstuden-revivesa-base-2:1.2 wrstuden-fixsa-newbase:1.2 nick-csl-alignment-base5:1.2 haad-dm:1.2.0.80 haad-dm-base:1.2 wrstuden-revivesa-base-1:1.2 simonb-wapbl-nbase:1.2 yamt-pf42-base4:1.2 simonb-wapbl:1.2.0.78 simonb-wapbl-base:1.2 yamt-pf42-base3:1.2 hpcarm-cleanup-nbase:1.2 yamt-pf42-baseX:1.2 yamt-pf42-base2:1.2 yamt-nfs-mp-base2:1.2 wrstuden-revivesa:1.2.0.76 wrstuden-revivesa-base:1.2 yamt-nfs-mp:1.2.0.74 yamt-nfs-mp-base:1.2 yamt-pf42:1.2.0.72 yamt-pf42-base:1.2 ad-socklock-base1:1.2 yamt-lazymbuf-base15:1.2 yamt-lazymbuf-base14:1.2 keiichi-mipv6-nbase:1.2 mjf-devfs2:1.2.0.70 mjf-devfs2-base:1.2 nick-net80211-sync:1.2.0.68 nick-net80211-sync-base:1.2 keiichi-mipv6:1.2.0.66 keiichi-mipv6-base:1.2 bouyer-xeni386-merge1:1.2 matt-armv6-prevmlocking:1.2 wrstuden-fixsa-base-1:1.2 vmlocking2-base3:1.2 netbsd-4-0:1.2.0.64 netbsd-4-0-RELEASE:1.2 bouyer-xeni386-nbase:1.2 yamt-kmem-base3:1.2 cube-autoconf:1.2.0.62 cube-autoconf-base:1.2 yamt-kmem-base2:1.2 bouyer-xeni386:1.2.0.60 bouyer-xeni386-base:1.2 yamt-kmem:1.2.0.58 yamt-kmem-base:1.2 vmlocking2-base2:1.2 reinoud-bufcleanup-nbase:1.2 vmlocking2:1.2.0.56 vmlocking2-base1:1.2 netbsd-4-0-RC5:1.2 matt-nb4-arm:1.2.0.54 matt-nb4-arm-base:1.2 matt-armv6-nbase:1.2 jmcneill-base:1.2 netbsd-4-0-RC4:1.2 mjf-devfs:1.2.0.52 mjf-devfs-base:1.2 bouyer-xenamd64-base2:1.2 vmlocking-nbase:1.2 yamt-x86pmap-base4:1.2 bouyer-xenamd64:1.2.0.50 bouyer-xenamd64-base:1.2 netbsd-4-0-RC3:1.2 yamt-x86pmap-base3:1.2 yamt-x86pmap-base2:1.2 netbsd-4-0-RC2:1.2 yamt-x86pmap:1.2.0.48 yamt-x86pmap-base:1.2 netbsd-4-0-RC1:1.2 matt-armv6:1.2.0.46 matt-armv6-base:1.2 matt-mips64-base:1.2 jmcneill-pm:1.2.0.44 jmcneill-pm-base:1.2 hpcarm-cleanup:1.2.0.42 hpcarm-cleanup-base:1.2 nick-csl-alignment:1.2.0.40 nick-csl-alignment-base:1.2 netbsd-3-1-1-RELEASE:1.1 netbsd-3-0-3-RELEASE:1.1 yamt-idlelwp-base8:1.2 wrstuden-fixsa:1.2.0.38 wrstuden-fixsa-base:1.2 thorpej-atomic:1.2.0.36 thorpej-atomic-base:1.2 reinoud-bufcleanup:1.2.0.34 reinoud-bufcleanup-base:1.2 mjf-ufs-trans:1.2.0.32 mjf-ufs-trans-base:1.2 vmlocking:1.2.0.30 vmlocking-base:1.2 ad-audiomp:1.2.0.28 ad-audiomp-base:1.2 yamt-idlelwp:1.2.0.26 post-newlock2-merge:1.2 newlock2-nbase:1.2 yamt-splraiseipl-base5:1.2 yamt-splraiseipl-base4:1.2 yamt-splraiseipl-base3:1.2 abandoned-netbsd-4-base:1.2 abandoned-netbsd-4:1.2.0.18 netbsd-3-1:1.1.0.26 netbsd-3-1-RELEASE:1.1 netbsd-3-0-2-RELEASE:1.1 yamt-splraiseipl-base2:1.2 netbsd-3-1-RC4:1.1 yamt-splraiseipl:1.2.0.22 yamt-splraiseipl-base:1.2 netbsd-3-1-RC3:1.1 yamt-pdpolicy-base9:1.2 newlock2:1.2.0.20 newlock2-base:1.2 yamt-pdpolicy-base8:1.2 netbsd-3-1-RC2:1.1 netbsd-3-1-RC1:1.1 yamt-pdpolicy-base7:1.2 netbsd-4:1.2.0.24 netbsd-4-base:1.2 yamt-pdpolicy-base6:1.2 chap-midi-nbase:1.2 netbsd-3-0-1-RELEASE:1.1 gdamore-uart:1.2.0.16 gdamore-uart-base:1.2 simonb-timcounters-final:1.2 yamt-pdpolicy-base5:1.2 chap-midi:1.2.0.14 chap-midi-base:1.2 yamt-pdpolicy-base4:1.2 yamt-pdpolicy-base3:1.2 peter-altq-base:1.2 peter-altq:1.2.0.12 yamt-pdpolicy-base2:1.2 elad-kernelauth-base:1.2 elad-kernelauth:1.2.0.10 yamt-pdpolicy:1.2.0.8 yamt-pdpolicy-base:1.2 yamt-uio_vmspace-base5:1.2 simonb-timecounters:1.2.0.6 simonb-timecounters-base:1.2 rpaulo-netinet-merge-pcb:1.2.0.4 rpaulo-netinet-merge-pcb-base:1.2 yamt-uio_vmspace:1.2.0.2 netbsd-3-0:1.1.0.24 netbsd-3-0-RELEASE:1.1 netbsd-3-0-RC6:1.1 yamt-readahead-base3:1.1 netbsd-3-0-RC5:1.1 netbsd-3-0-RC4:1.1 netbsd-3-0-RC3:1.1 yamt-readahead-base2:1.1 netbsd-3-0-RC2:1.1 yamt-readahead-pervnode:1.1 yamt-readahead-perfile:1.1 yamt-readahead:1.1.0.22 yamt-readahead-base:1.1 netbsd-3-0-RC1:1.1 yamt-vop-base3:1.1 netbsd-2-0-3-RELEASE:1.1.2.2 netbsd-2-1:1.1.2.2.0.4 yamt-vop-base2:1.1 thorpej-vnode-attr:1.1.0.20 thorpej-vnode-attr-base:1.1 netbsd-2-1-RELEASE:1.1.2.2 yamt-vop:1.1.0.18 yamt-vop-base:1.1 netbsd-2-1-RC6:1.1.2.2 netbsd-2-1-RC5:1.1.2.2 netbsd-2-1-RC4:1.1.2.2 netbsd-2-1-RC3:1.1.2.2 netbsd-2-1-RC2:1.1.2.2 netbsd-2-1-RC1:1.1.2.2 yamt-lazymbuf:1.1.0.16 yamt-km-base4:1.1 netbsd-2-0-2-RELEASE:1.1.2.2 yamt-km-base3:1.1 netbsd-3:1.1.0.14 netbsd-3-base:1.1 yamt-km-base2:1.1 yamt-km:1.1.0.10 yamt-km-base:1.1 kent-audio2:1.1.0.8 kent-audio2-base:1.1 netbsd-2-0-1-RELEASE:1.1.2.2 kent-audio1-beforemerge:1.1 netbsd-2:1.1.2.2.0.2 netbsd-2-base:1.1.2.2 kent-audio1:1.1.0.6 kent-audio1-base:1.1 netbsd-2-0-RELEASE:1.1.2.2 netbsd-2-0-RC5:1.1.2.2 netbsd-2-0-RC4:1.1.2.2 netbsd-2-0-RC3:1.1.2.2 netbsd-2-0-RC2:1.1.2.2 netbsd-2-0-RC1:1.1.2.2 ktrace-lwp-base:1.1 ktrace-lwp:1.1.0.4 netbsd-2-0:1.1.0.2; locks; strict; comment @# @; 1.6 date 2018.01.10.10.56.30; author knakahara; state Exp; branches; next 1.5; commitid yPVdtArNvCmzNjmA; 1.5 date 2012.01.06.14.17.11; author drochner; state Exp; branches 1.5.40.1; next 1.4; 1.4 date 2012.01.04.16.09.43; author drochner; state Exp; branches; next 1.3; 1.3 date 2012.01.04.15.55.36; author drochner; state Exp; branches; next 1.2; 1.2 date 2005.12.11.12.25.05; author christos; state Exp; branches 1.2.110.1 1.2.114.1; next 1.1; 1.1 date 2004.05.07.00.55.14; author jonathan; state Exp; branches 1.1.2.1 1.1.4.1; next ; 1.5.40.1 date 2018.02.11.21.17.34; author snj; state Exp; branches; next ; commitid 1Pg5KdsmcZWRbuqA; 1.2.110.1 date 2012.04.17.00.08.46; author yamt; state Exp; branches; next ; 1.2.114.1 date 2012.02.18.07.35.44; author mrg; state Exp; branches; next ; 1.1.2.1 date 2004.05.07.00.55.14; author tron; state dead; branches; next 1.1.2.2; 1.1.2.2 date 2004.05.10.15.00.38; author tron; state Exp; branches; next ; 1.1.4.1 date 2004.05.07.00.55.14; author skrll; state dead; branches; next 1.1.4.2; 1.1.4.2 date 2004.08.03.10.55.29; author skrll; state Exp; branches; next 1.1.4.3; 1.1.4.3 date 2004.09.18.14.55.32; author skrll; state Exp; branches; next 1.1.4.4; 1.1.4.4 date 2004.09.21.13.37.48; author skrll; state Exp; branches; next ; desc @@ 1.6 log @add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by christos@@n.o, joerg@@n.o and ozaki-r@@n.o, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html @ text @# $NetBSD: Makefile,v 1.5 2012/01/06 14:17:11 drochner Exp $ INCSDIR= /usr/include/netipsec INCS= ah_var.h esp_var.h ipcomp_var.h ipip_var.h ipsec_var.h \ keysock.h INCS+= ipsec.h INCS+= ipsecif.h .include @ 1.5 log @more IPSEC header cleanup: don't install unneeded headers to userland, and remove some differences berween KAME and FAST_IPSEC @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2012/01/04 16:09:43 drochner Exp $ d8 1 @ 1.5.40.1 log @Pull up following revision(s) (requested by ozaki-r in ticket #536): distrib/sets/lists/base/shl.mi: 1.825 distrib/sets/lists/comp/mi: 1.2168-1.2169 distrib/sets/lists/comp/shl.mi: 1.310 distrib/sets/lists/debug/mi: 1.234 distrib/sets/lists/debug/shl.mi: 1.188 distrib/sets/lists/man/mi: 1.1570 distrib/sets/lists/tests/mi: 1.772 etc/mtree/NetBSD.dist.tests: 1.150 share/man/man4/Makefile: 1.650 share/man/man4/ipsec.4: 1.42-1.43 share/man/man4/ipsecif.4: 1.1-1.5 sys/arch/amd64/conf/ALL: 1.77 sys/arch/amd64/conf/GENERIC: 1.480 sys/conf/files: 1.1191 sys/net/Makefile: 1.34 sys/net/files.net: 1.14 sys/net/if.c: 1.404 sys/net/if.h: 1.248 sys/net/if_gif.c: 1.135 sys/net/if_ipsec.c: 1.1-1.3 sys/net/if_ipsec.h: 1.1 sys/net/if_l2tp.c: 1.16 sys/net/if_types.h: 1.28 sys/netinet/in.c: 1.214 sys/netinet/in.h: 1.103 sys/netinet/in_gif.c: 1.92 sys/netinet/ip_var.h: 1.122 sys/netinet6/in6.c: 1.257 sys/netinet6/in6.h: 1.88 sys/netinet6/in6_gif.c: 1.90 sys/netinet6/ip6_var.h: 1.75 sys/netipsec/Makefile: 1.6 sys/netipsec/files.netipsec: 1.13 sys/netipsec/ipsec.h: 1.62 sys/netipsec/ipsecif.c: 1.1 sys/netipsec/ipsecif.h: 1.1 sys/netipsec/key.c: 1.246-1.247 sys/netipsec/key.h: 1.34 sys/rump/net/Makefile.rumpnetcomp: 1.20 sys/rump/net/lib/libipsec/IPSEC.ioconf: 1.1 sys/rump/net/lib/libipsec/Makefile: 1.1 sys/rump/net/lib/libipsec/ipsec_component.c: 1.1 tests/net/Makefile: 1.34 tests/net/if_ipsec/Makefile: 1.1 tests/net/if_ipsec/t_ipsec.sh: 1.1-1.2 Don't touch an SP without a reference to it unify processing to check nesting count for some tunnel protocols. add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by christos@@n.o, joerg@@n.o and ozaki-r@@n.o, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html ipsec(4) interface supports rump now. add ipsec(4) interface ATF. add ipsec(4) interface man as ipsecif.4. add ipsec(4) interface to amd64/GENERIC and amd64/ALL configs. apply in{,6}_tunnel_validate() to gif(4). Spell IPsec that way. Simplify macro usage. Sort SEE ALSO. Bump date for previous. Improve wording and macro use. Some parts are not clear to me, so someone with knowledge of ipsecif(4) should improve this some more. Improve ipsecif.4. Default port ipsec(4) NAT-T is tested now. pointed out by wiz@@n.o and suggested by ozaki-r@@n.o, thanks. Change the prefix of test names to ipsecif_ to distinguish from tests for ipsec(4) New sentence, new line. Remove empty macro. Fix PR kern/52920. Pointed out by David Binderman, thanks. Improve wording, and put a new drawing, from me and Kengo Nakahara. apply a little more #ifdef INET/INET6. fixes !INET6 builds. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2012/01/06 14:17:11 drochner Exp $ a7 1 INCS+= ipsecif.h @ 1.4 log @include rather than from userland where possible, for consistency and compatibility to FreeBSD (exception: KAME specific statistics gathering in netstat(1) and systat(1)) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2012/01/04 15:55:36 drochner Exp $ d6 1 a6 1 keydb.h @ 1.3 log @-consistently use "char *" for the compiled policy buffer in the ipsec_*_policy() functions, as it was documented and used by clients -remove "ipsec_policy_t" which was undocumented and only present in the KAME version of the ipsec.h header -misc cleanup of historical artefacts, and to remove unnecessary differences between KAME ans FAST_IPSEC @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2005/12/11 12:25:05 christos Exp $ d7 1 a7 2 # notyet #INCS+= ipsec.h @ 1.2 log @merge ktrace-lwp. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.4.3 2004/09/21 13:37:48 skrll Exp $ d7 2 @ 1.2.110.1 log @sync with head @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2005/12/11 12:25:05 christos Exp $ d6 1 a6 2 keysock.h INCS+= ipsec.h @ 1.2.114.1 log @merge to -current. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2012/01/06 14:17:11 drochner Exp $ d6 1 a6 2 keysock.h INCS+= ipsec.h @ 1.1 log @Redo net.inet.* sysctl subtree for fast-ipsec from scratch. Attach FAST-IPSEC statistics with 64-bit counters to new sysctl MIB. Rework netstat to show FAST_IPSEC statistics, via sysctl, for netstat -p ipsec. New kernel files: sys/netipsec/Makefile (new file; install *_var.h includes) sys/netipsec/ipsec_var.h (new 64-bit mib counter struct) Changed kernel files: sys/Makefile (recurse into sys/netipsec/) sys/netinet/in.h (fake IP_PROTO name for fast_ipsec sysctl subtree.) sys/netipsec/ipsec.h (minimal userspace inclusion) sys/netipsec/ipsec_osdep.h (minimal userspace inclusion) sys/netipsec/ipsec_netbsd.c (redo sysctl subtree from scratch) sys/netipsec/key*.c (fix broken net.key subtree) sys/netipsec/ah_var.h (increase all counters to 64 bits) sys/netipsec/esp_var.h (increase all counters to 64 bits) sys/netipsec/ipip_var.h (increase all counters to 64 bits) sys/netipsec/ipcomp_var.h (increase all counters to 64 bits) sys/netipsec/ipsec.c (add #include netipsec/ipsec_var.h) sys/netipsec/ipsec_mbuf.c (add #include netipsec/ipsec_var.h) sys/netipsec/ipsec_output.c (add #include netipsec/ipsec_var.h) sys/netinet/raw_ip.c (add #include netipsec/ipsec_var.h) sys/netinet/tcp_input.c (add #include netipsec/ipsec_var.h) sys/netinet/udp_usrreq.c (add #include netipsec/ipsec_var.h) Changes to usr.bin/netstat to print the new fast-ipsec sysctl tree for "netstat -s -p ipsec": New file: usr.bin/netstat/fast_ipsec.c (print fast-ipsec counters) Changed files: usr.bin/netstat/Makefile (add fast_ipsec.c) usr.bin/netstat/netstat.h (declarations for fast_ipsec.c) usr.bin/netstat/main.c (call KAME-vs-fast-ipsec dispatcher) @ text @d1 1 a1 1 # $NetBSD:$ @ 1.1.2.1 log @file Makefile was added on branch netbsd-2-0 on 2004-05-10 15:00:38 +0000 @ text @d1 8 @ 1.1.2.2 log @Pull up revision 1.1 (requested by jonathan in ticket #280): Redo net.inet.* sysctl subtree for fast-ipsec from scratch. Attach FAST-IPSEC statistics with 64-bit counters to new sysctl MIB. Rework netstat to show FAST_IPSEC statistics, via sysctl, for netstat -p ipsec. New kernel files: sys/netipsec/Makefile (new file; install *_var.h includes) sys/netipsec/ipsec_var.h (new 64-bit mib counter struct) Changed kernel files: sys/Makefile (recurse into sys/netipsec/) sys/netinet/in.h (fake IP_PROTO name for fast_ipsec sysctl subtree.) sys/netipsec/ipsec.h (minimal userspace inclusion) sys/netipsec/ipsec_osdep.h (minimal userspace inclusion) sys/netipsec/ipsec_netbsd.c (redo sysctl subtree from scratch) sys/netipsec/key*.c (fix broken net.key subtree) sys/netipsec/ah_var.h (increase all counters to 64 bits) sys/netipsec/esp_var.h (increase all counters to 64 bits) sys/netipsec/ipip_var.h (increase all counters to 64 bits) sys/netipsec/ipcomp_var.h (increase all counters to 64 bits) sys/netipsec/ipsec.c (add #include netipsec/ipsec_var.h) sys/netipsec/ipsec_mbuf.c (add #include netipsec/ipsec_var.h) sys/netipsec/ipsec_output.c (add #include netipsec/ipsec_var.h) sys/netinet/raw_ip.c (add #include netipsec/ipsec_var.h) sys/netinet/tcp_input.c (add #include netipsec/ipsec_var.h) sys/netinet/udp_usrreq.c (add #include netipsec/ipsec_var.h) Changes to usr.bin/netstat to print the new fast-ipsec sysctl tree for "netstat -s -p ipsec": New file: usr.bin/netstat/fast_ipsec.c (print fast-ipsec counters) Changed files: usr.bin/netstat/Makefile (add fast_ipsec.c) usr.bin/netstat/netstat.h (declarations for fast_ipsec.c) usr.bin/netstat/main.c (call KAME-vs-fast-ipsec dispatcher) @ text @a0 8 # $NetBSD: Makefile,v 1.1.2.1 2004/05/10 15:00:38 tron Exp $ INCSDIR= /usr/include/netipsec INCS= ah_var.h esp_var.h ipcomp_var.h ipip_var.h ipsec_var.h \ keydb.h .include @ 1.1.4.1 log @file Makefile was added on branch ktrace-lwp on 2004-08-03 10:55:29 +0000 @ text @d1 8 @ 1.1.4.2 log @Sync with HEAD @ text @a0 8 # $NetBSD: Makefile,v 1.1.4.1 2004/08/03 10:55:29 skrll Exp $ INCSDIR= /usr/include/netipsec INCS= ah_var.h esp_var.h ipcomp_var.h ipip_var.h ipsec_var.h \ keydb.h .include @ 1.1.4.3 log @Sync with HEAD. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.4.2 2004/09/18 14:55:32 skrll Exp $ @ 1.1.4.4 log @Fix the sync with head I botched. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.4.3 2004/09/21 13:37:48 skrll Exp $ @