CVS commit: src

["Maxime Villard" <maxv%netbsd.org@localhost>]

Module Name:    src
Committed By:   maxv
Date:           Thu May 31 07:03:57 UTC 2018

Modified Files:
        src/share/man/man4: udp.4
        src/sys/netinet: in_pcb.h udp_usrreq.c
        src/sys/netipsec: ipsec_output.c ipsecif.c

Log Message:
Remove support for non-IKE markers in the kernel. Discussed on tech-net@,
and now in PR/53334. Basically non-IKE markers come from a deprecated
draft, and our kernel code for them has never worked.

Setsockopt will now reject UDP_ENCAP_ESPINUDP_NON_IKE.

Perhaps we should also add a check in key_handle_natt_info(), to make
sure we also reject UDP_ENCAP_ESPINUDP_NON_IKE in the SADB.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 src/share/man/man4/udp.4
cvs rdiff -u -r1.65 -r1.66 src/sys/netinet/in_pcb.h
cvs rdiff -u -r1.252 -r1.253 src/sys/netinet/udp_usrreq.c
cvs rdiff -u -r1.78 -r1.79 src/sys/netipsec/ipsec_output.c
cvs rdiff -u -r1.9 -r1.10 src/sys/netipsec/ipsecif.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.