Subject: CVS commit: src/sys
To: None <source-changes@NetBSD.org>
From: Jun-ichiro itojun Hagino <itojun@netbsd.org>
List: source-changes
Date: 04/26/2004 03:54:29
Module Name:	src
Committed By:	itojun
Date:		Mon Apr 26 03:54:29 UTC 2004

Modified Files:
	src/sys/netinet: tcp_input.c tcp_output.c tcp_subr.c tcp_var.h
	src/sys/netkey: key.c

Log Message:
make TCP MD5 signature work with KAME IPSEC (#define IPSEC).

support IPv6 if KAME IPSEC (RFC is not explicit about how we make data stream
for checksum with IPv6, but i'm pretty sure using normal pseudo-header is the
right thing).

XXX
current TCP MD5 signature code has giant flaw:
it does not validate signature on input (can't believe it! what is the point?)


To generate a diff of this commit:
cvs rdiff -r1.202 -r1.203 src/sys/netinet/tcp_input.c
cvs rdiff -r1.110 -r1.111 src/sys/netinet/tcp_output.c \
    src/sys/netinet/tcp_var.h
cvs rdiff -r1.166 -r1.167 src/sys/netinet/tcp_subr.c
cvs rdiff -r1.115 -r1.116 src/sys/netkey/key.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.