Re: CVS commit: cryptosrc-intl

[itojun%iijlab.net@localhost]

>A good comparison is the KAME distribution.  In addition to the kernel
>IPv6 support, library support, and core programs (ping6, mods to ftp[d],
>etc.), KAME ships a number of userland programs of various degrees of
>importance.  When KAME was imported, the kernel, library, and core
>programs were imported, but many of the fringe programs were either not
>imported or were brought into pkgsrc.  They are IPv6 programs, but they
>are not things which either had analogies in tree already or which
>discussion on the relevant lists deemed appropriate to bring in as added
>functionality.  That made them pkgsrc material.

        For more datapoint:
        During KAME import, I omitted some oitems in KAME tree on purpose.
        Items that are not imported from KAME tree are either:
        - not mature enough for wide use, or have some security issues or
          something like that
        - not really for generic use
        - KAME team will not be able to maintain the code
        The following lists some of them.

        If you want to see some item imported, name it and please let me know.
        I'll try to import it as pkgsrc, or 

        (I'm already trying to put fun items, like pkgsrc/games/quake6,
        as soon as possible!)

itojun


sbin/ip6fw - waiting for ipfilter 

usr.bin/mcastread - just for testing
usr.bin/mcastsend - just for testing
usr.bin/mchat - just for testing, no protocol documentation
usr.bin/v6test - just for testing
usr.sbin/icmp6dump - just for testing
usr.sbin/mping - just for testing

usr.sbin/bgpd - we can't maintain it, use pkgsrc/net/zebra
usr.sbin/hroute6d - we can't maintain it, use pkgsrc/net/zebra

usr.sbin/dtcp - not mature enough, depend on pkgsrc/lang/ruby
usr.sbin/natptconfig - kernel part not imported, not mature enough
usr.sbin/natptd - kernel part not imported, not mature enough
usr.sbin/natptlo - kernel part not imported, not mature enoughg
usr.sbin/rrenumd - big security hole in the spec (use of IPsec is suggested
        in the spec, but the suggestion requires "IPsec over IPv6 multicast
        over IPv6 site-local address" - well, not practical at all)

usr.sbin/pim6sd - imported recently