[src/netbsd-3]: src/crypto/dist/ipsec-tools Pull up revision 1.17 (requested ...

[tron <tron%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/2499a93c75f2
branches:  netbsd-3
changeset: 576435:2499a93c75f2
user:      tron <tron%NetBSD.org@localhost>
date:      Sat Jul 02 23:22:41 2005 +0000

description:
Pull up revision 1.17 (requested by manu in ticket #503):
NAT-T fix: We treat null ports in SPD as wildcard so that IKE ports
are used instead. This was done on phase 2 initiation from the kernel
(acquire message), but not on phase 2 initiation retries when the
phase 2 had been queued  for a phase 1.

diffstat:

 crypto/dist/ipsec-tools/ChangeLog |  9 +++++++++
 1 files changed, 9 insertions(+), 0 deletions(-)

diffs (16 lines):

diff -r 9619ce4155ea -r 2499a93c75f2 crypto/dist/ipsec-tools/ChangeLog
--- a/crypto/dist/ipsec-tools/ChangeLog Sat Jul 02 23:22:34 2005 +0000
+++ b/crypto/dist/ipsec-tools/ChangeLog Sat Jul 02 23:22:41 2005 +0000
@@ -1,3 +1,12 @@
+2005-06-22  Emmanuel Dreyfus  <manu%netbsd.org@localhost>
+
+       From Ludo Stellingwerff <ludo%protactive.nl@localhost>:
+       * src/racoon/isakmp.c: NAT-T fix: We treat null ports in SPD as 
+         wildcard so that IKE ports are used instead. This was done on
+         phase 2 initiation from the kernel (acquire message), but not 
+         on phase 2 initiation retries when the phase 2 had been queued
+         for a phase 1.
+
 2005-06-07  Emmanuel Dreyfus  <manu%netbsd.org@localhost>
 
        From Larry Baird <lab%gta.com@localhost>