[src/trunk]: src/sys/netipsec The FAST_IPSEC code actually supports KEYCTL_PR...

[atatat <atatat%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/5eb285919c2a
branches:  trunk
changeset: 566933:5eb285919c2a
user:      atatat <atatat%NetBSD.org@localhost>
date:      Tue May 25 04:00:33 2004 +0000

description:
The FAST_IPSEC code actually supports KEYCTL_PREFERED_OLDSA, so export
it via sysctl.

diffstat:

 sys/netipsec/key.c |  9 +++++++--
 1 files changed, 7 insertions(+), 2 deletions(-)

diffs (30 lines):

diff -r 08f07f860fd1 -r 5eb285919c2a sys/netipsec/key.c
--- a/sys/netipsec/key.c        Tue May 25 01:36:37 2004 +0000
+++ b/sys/netipsec/key.c        Tue May 25 04:00:33 2004 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: key.c,v 1.15 2004/04/30 01:08:35 jonathan Exp $        */
+/*     $NetBSD: key.c,v 1.16 2004/05/25 04:00:33 atatat Exp $  */
 /*     $FreeBSD: src/sys/netipsec/key.c,v 1.3.2.3 2004/02/14 22:23:23 bms Exp $        */
 /*     $KAME: key.c,v 1.191 2001/06/27 10:46:49 sakane Exp $   */
 
@@ -32,7 +32,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: key.c,v 1.15 2004/04/30 01:08:35 jonathan Exp $");
+__KERNEL_RCSID(0, "$NetBSD: key.c,v 1.16 2004/05/25 04:00:33 atatat Exp $");
 
 /*
  * This code is referd to RFC 2367
@@ -7699,6 +7699,11 @@
                       CTL_NET, FAST_IPSEC_PFKEY, KEYCTL_ESP_KEYMIN, CTL_EOL);
        sysctl_createv(clog, 0, NULL, NULL,
                       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
+                      CTLTYPE_INT, "prefered_oldsa", NULL,
+                      NULL, 0, &key_prefered_oldsa, 0,
+                      CTL_NET, PF_KEY, KEYCTL_PREFERED_OLDSA, CTL_EOL);
+       sysctl_createv(clog, 0, NULL, NULL,
+                      CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
                       CTLTYPE_INT, "esp_auth", NULL,
                       NULL, 0, &ipsec_esp_auth, 0,
                       CTL_NET, FAST_IPSEC_PFKEY, KEYCTL_ESP_AUTH, CTL_EOL);