Vincent,

Matt may not be quite au-fait with this particuar area. The
documentation you quoted is for exactly the OCF/FAST_IPsec hook'd
stuff I mentioned earlier.  (Commiting a NetBSD version would
therefore have the same OCF/FAST-IPSEC dependency; which currently
rules out a working IPv6 IPsec).


Of course the NetBSD setkey API has already diverged from rfc2367; so
compatibility at that level is therefore, uh, moot.