Subject: CVS commit: src/sys/netinet6
To: None <source-changes@NetBSD.org>
From: Jonathan Stone <jonathan@netbsd.org>
List: source-changes
Date: 04/26/2004 01:53:59
Module Name:	src
Committed By:	jonathan
Date:		Mon Apr 26 01:53:59 UTC 2004

Modified Files:
	src/sys/netinet6: in6_pcb.c

Log Message:
Fix per-PCB IPsec policy cache for FAST_IPSEC:

The sys/netipsec policy-cache (added by Jason Thorpe as a rewrite of
the KAME per-PCB policy cache) assumes that policy-cacheable PCBs
always has a non-NULL inph_sp in the common PCB header.  So we must
do all the per-PCB policy cache calls when either (KAME) IPSEC, or
FAST_IPSEC is defined.  ``Make it so''.

We can now support non-IPsec'ed IPv6 traffic, when both
``options FAST_IPSEC'' and ``options INET6'' are configured.


To generate a diff of this commit:
cvs rdiff -r1.63 -r1.64 src/sys/netinet6/in6_pcb.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.