Module Name:	src
Committed By:	tron
Date:		Sat May 29 21:17:42 UTC 2004

Modified Files:
	src/sys/netipsec [netbsd-2-0]: key.c

Log Message:
Pull up revision 1.17 (requested by jonathan in ticket #401):
Thanks to Andrew Brown for the heads-up that fast_ipsec still had
key_prefered_oldsa, defaulted to 1 (on): preferring old SAs, based on
the ill-concieved Jenkins I-D, is broken by design.  For now, just
turn it off, as the simplest way to fix this in the 2.0 branch.
Next step is to rip it out entirely: it was always a bad idea.


To generate a diff of this commit:
cvs rdiff -r1.11.2.3 -r1.11.2.4 src/sys/netipsec/key.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.