CVS commit: src/sys

["Charles M. Hannum" <mycroft%netbsd.org@localhost>]

Module Name:    src
Committed By:   mycroft
Date:           Sun Sep 28 04:45:14 UTC 2003

Modified Files:
        src/sys/netinet: ip_input.c
        src/sys/netinet6: ah_input.c

Log Message:
Remove some code that breaks AH tunnels completely.  The comment describing
the purpose of this code appears to be on crack -- it's talking about
end-to-end authentication, but the purpose of an AH tunnel is NOT end-to-end
authentication; it's authentication of the tunnel endpoints.

NB: This does not fix the fact that IPsec leaks "packet tags."


To generate a diff of this commit:
cvs rdiff -r1.178 -r1.179 src/sys/netinet/ip_input.c
cvs rdiff -r1.41 -r1.42 src/sys/netinet6/ah_input.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.