Module Name:	src
Committed By:	jonathan
Date:		Wed May 26 22:14:18 UTC 2004

Modified Files:
	src/sys/netipsec: key.c

Log Message:
Thanks to Andrew Brown for the heads-up that fast_ipsec still had
key_prefered_oldsa, defaulted to 1 (on): preferring old SAs, based on
the ill-concieved Jenkins I-D, is broken by design.  For now, just
turn it off, as the simplest way to fix this in the 2.0 branch.

Next step is to rip it out entirely: it was always a bad idea.


To generate a diff of this commit:
cvs rdiff -r1.16 -r1.17 src/sys/netipsec/key.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.