CVS commit: [netbsd-8] src

["Soren Jacobsen" <snj%netbsd.org@localhost>]

Module Name:    src
Committed By:   snj
Date:           Fri Nov 17 20:43:11 UTC 2017

Modified Files:
        src/distrib/sets/lists/debug [netbsd-8]: mi
        src/distrib/sets/lists/tests [netbsd-8]: mi
        src/etc/mtree [netbsd-8]: NetBSD.dist.tests
        src/sys/net/npf [netbsd-8]: npf_ctl.c
        src/tests/net [netbsd-8]: net_common.sh
        src/tests/net/ipsec [netbsd-8]: Makefile algorithms.sh
        src/usr.sbin/npf/npfctl [netbsd-8]: npfctl.c
Added Files:
        src/tests/net/ipsec [netbsd-8]: natt_terminator.c t_ipsec_natt.sh

Log Message:
Pull up following revision(s) (requested by ozaki-r in ticket #357):
        distrib/sets/lists/debug/mi: 1.228
        distrib/sets/lists/tests/mi: 1.765-1.766
        etc/mtree/NetBSD.dist.tests: 1.149
        sys/net/npf/npf_ctl.c: 1.49
        tests/net/ipsec/Makefile: 1.10
        tests/net/ipsec/algorithms.sh: 1.6
        tests/net/ipsec/natt_terminator.c: 1.1
        tests/net/ipsec/t_ipsec_natt.sh: 1.1
        tests/net/net_common.sh: 1.23-1.24
        usr.sbin/npf/npfctl/npfctl.c: 1.54
Handle esp-udp for NAT-T
--
Fix npfclt reload on rump kernels
It fails because npfctl cannot get an errno when it calls ioctl to the (rump)
kernel; npfctl (libnpf) expects that an errno is returned via proplib,
however, the rump library of npf doesn't so. It happens because of mishandlings
of complicate npf kernel options.
PR kern/52643
--
Fix showing translated port (ntohs-ed twice wrongly)
--
Add test cases of NAT-T (transport mode)
A small C program is added to make a special socket (UDP_ENCAP_ESPINUDP)
and keep it to handle UDP-encapsulated ESP packets.
--
Add net/ipsec debug lib directory
--
Add ./usr/libdata/debug/usr/tests/net/ipsec
--
Stop using bpfjit
Because most architectures don't support it and npf still works without it.


To generate a diff of this commit:
cvs rdiff -u -r1.216.2.4 -r1.216.2.5 src/distrib/sets/lists/debug/mi
cvs rdiff -u -r1.752.2.5 -r1.752.2.6 src/distrib/sets/lists/tests/mi
cvs rdiff -u -r1.147.2.1 -r1.147.2.2 src/etc/mtree/NetBSD.dist.tests
cvs rdiff -u -r1.48 -r1.48.2.1 src/sys/net/npf/npf_ctl.c
cvs rdiff -u -r1.18.2.2 -r1.18.2.3 src/tests/net/net_common.sh
cvs rdiff -u -r1.6.2.1 -r1.6.2.2 src/tests/net/ipsec/Makefile
cvs rdiff -u -r1.4.2.1 -r1.4.2.2 src/tests/net/ipsec/algorithms.sh
cvs rdiff -u -r0 -r1.1.2.2 src/tests/net/ipsec/natt_terminator.c \
    src/tests/net/ipsec/t_ipsec_natt.sh
cvs rdiff -u -r1.53 -r1.53.6.1 src/usr.sbin/npf/npfctl/npfctl.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.