Module Name:	basesrc
Committed By:	itojun
Date:		Mon Jun 12 10:40:53 UTC 2000

Modified Files:
	basesrc/lib/libipsec: ipsec_dump_policy.c ipsec_get_policylen.c
	    ipsec_set_policy.3 ipsec_strerror.3 ipsec_strerror.c
	    ipsec_strerror.h pfkey.c pfkey_dump.c policy_parse.y policy_token.l
	basesrc/usr.sbin/setkey: Makefile parse.y setkey.8 setkey.c
	    test-pfkey.c token.l vchar.h
	syssrc/sys/net: pfkeyv2.h
	syssrc/sys/netinet6: ipsec.c
	syssrc/sys/netkey: key.c key.h key_debug.c key_debug.h key_var.h
	    keydb.c keydb.h keysock.c keysock.h
Added Files:
	basesrc/lib/libipsec: libpfkey.h

Log Message:
sync with almost-latest KAME IPsec.  full changelog would be too big
to mention here.  notable changes are like below.

kernel:
- make PF_KEY kernel interface more robust against broken input stream.
  it includes complete internal structure change in sys/netkey/key.c.
- remove non-RFC compliant change in PF_KEY API, in particular,
  in struct sadb_msg.  we cannot just change these standard structs.
  sadb_x_sa2 is introduced instead.
- remove prototypes for pfkey_xx functions from /usr/include/net/pfkeyv2.h.
  these functions are not supplied in /usr/lib.

setkey(8):
- get/delete does not require "-m mode" (ignored with warning, if you
  specify it)
- spddelete takes direction specification


To generate a diff of this commit:
cvs rdiff -r1.2 -r1.3 basesrc/lib/libipsec/ipsec_dump_policy.c \
    basesrc/lib/libipsec/ipsec_get_policylen.c \
    basesrc/lib/libipsec/policy_parse.y
cvs rdiff -r1.6 -r1.7 basesrc/lib/libipsec/ipsec_set_policy.3 \
    basesrc/lib/libipsec/ipsec_strerror.3 basesrc/lib/libipsec/pfkey_dump.c
cvs rdiff -r1.5 -r1.6 basesrc/lib/libipsec/ipsec_strerror.c \
    basesrc/lib/libipsec/ipsec_strerror.h
cvs rdiff -r0 -r1.1 basesrc/lib/libipsec/libpfkey.h
cvs rdiff -r1.9 -r1.10 basesrc/lib/libipsec/pfkey.c
cvs rdiff -r1.3 -r1.4 basesrc/lib/libipsec/policy_token.l
cvs rdiff -r1.5 -r1.6 basesrc/usr.sbin/setkey/Makefile \
    basesrc/usr.sbin/setkey/parse.y
cvs rdiff -r1.10 -r1.11 basesrc/usr.sbin/setkey/setkey.8
cvs rdiff -r1.6 -r1.7 basesrc/usr.sbin/setkey/setkey.c \
    basesrc/usr.sbin/setkey/token.l
cvs rdiff -r1.3 -r1.4 basesrc/usr.sbin/setkey/test-pfkey.c
cvs rdiff -r1.2 -r1.3 basesrc/usr.sbin/setkey/vchar.h
cvs rdiff -r1.4 -r1.5 syssrc/sys/net/pfkeyv2.h
cvs rdiff -r1.21 -r1.22 syssrc/sys/netinet6/ipsec.c
cvs rdiff -r1.18 -r1.19 syssrc/sys/netkey/key.c
cvs rdiff -r1.5 -r1.6 syssrc/sys/netkey/key.h syssrc/sys/netkey/key_debug.h \
    syssrc/sys/netkey/keysock.h
cvs rdiff -r1.9 -r1.10 syssrc/sys/netkey/key_debug.c \
    syssrc/sys/netkey/keysock.c
cvs rdiff -r1.7 -r1.8 syssrc/sys/netkey/key_var.h
cvs rdiff -r1.2 -r1.3 syssrc/sys/netkey/keydb.c
cvs rdiff -r1.4 -r1.5 syssrc/sys/netkey/keydb.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.