Subject: CVS commit: src/sys/netipsec
To: None <source-changes@NetBSD.org>
From: Jonathan Stone <firstname.lastname@example.org>
Date: 05/26/2004 22:14:18
Module Name: src
Committed By: jonathan
Date: Wed May 26 22:14:18 UTC 2004
Thanks to Andrew Brown for the heads-up that fast_ipsec still had
key_prefered_oldsa, defaulted to 1 (on): preferring old SAs, based on
the ill-concieved Jenkins I-D, is broken by design. For now, just
turn it off, as the simplest way to fix this in the 2.0 branch.
Next step is to rip it out entirely: it was always a bad idea.
To generate a diff of this commit:
cvs rdiff -r1.16 -r1.17 src/sys/netipsec/key.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.