CVS commit: src/sys

["Ryota Ozaki" <ozaki-r%netbsd.org@localhost>]

Module Name:    src
Committed By:   ozaki-r
Date:           Thu Apr  6 09:20:07 UTC 2017

Modified Files:
        src/sys/net: if.c
        src/sys/netipsec: ipsec.c ipsec.h ipsec_input.c ipsec_netbsd.c
            ipsec_output.c key.c key_debug.c xform_ah.c xform_esp.c
            xform_ipcomp.c xform_ipip.c xform_tcp.c

Log Message:
Prepare netipsec for rump-ification

- Include "opt_*.h" only if _KERNEL_OPT is defined
- Allow encapinit to be called twice (by ifinit and ipe4_attach)
  - ifinit didn't call encapinit if IPSEC is enabled (ipe4_attach called
    it instead), however, on a rump kernel ipe4_attach may not be called
    even if IPSEC is enabled. So we need to allow ifinit to call it anyway
- Setup sysctls in ipsec_attach explicitly instead of using SYSCTL_SETUP
- Call ip6flow_invalidate_all in key_spdadd only if in6_present
  - It's possible that a rump kernel loads the ipsec library but not
    the inet6 library


To generate a diff of this commit:
cvs rdiff -u -r1.391 -r1.392 src/sys/net/if.c
cvs rdiff -u -r1.70 -r1.71 src/sys/netipsec/ipsec.c
cvs rdiff -u -r1.38 -r1.39 src/sys/netipsec/ipsec.h
cvs rdiff -u -r1.37 -r1.38 src/sys/netipsec/ipsec_input.c
cvs rdiff -u -r1.39 -r1.40 src/sys/netipsec/ipsec_netbsd.c
cvs rdiff -u -r1.41 -r1.42 src/sys/netipsec/ipsec_output.c
cvs rdiff -u -r1.103 -r1.104 src/sys/netipsec/key.c
cvs rdiff -u -r1.13 -r1.14 src/sys/netipsec/key_debug.c
cvs rdiff -u -r1.44 -r1.45 src/sys/netipsec/xform_ah.c
cvs rdiff -u -r1.46 -r1.47 src/sys/netipsec/xform_esp.c
cvs rdiff -u -r1.31 -r1.32 src/sys/netipsec/xform_ipcomp.c
cvs rdiff -u -r1.42 -r1.43 src/sys/netipsec/xform_ipip.c
cvs rdiff -u -r1.8 -r1.9 src/sys/netipsec/xform_tcp.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.