Remove support for storing credentials and auth information in the kernel.
authormikeb <mikeb@openbsd.org>
Tue, 14 Apr 2015 12:22:15 +0000 (12:22 +0000)
committermikeb <mikeb@openbsd.org>
Tue, 14 Apr 2015 12:22:15 +0000 (12:22 +0000)
commitd0aa6ebacff682ebdba22deb3b54c1111107207c
tree94abd855aef439a610ba03c01d04359e6ea4ee98
parent8c2803e9ce86e8b30bacb211c08b61e65ff94b4f
Remove support for storing credentials and auth information in the kernel.

This code is largely unfinished and is not used for anything.  The change
leaves identities as only objects referenced by ipsec_ref structure and
their handling requires some changes to support more advanced matching of
IPsec connections.

No objections from reyk and hshoexer, with and OK markus.
15 files changed:
sbin/ipsecctl/pfkdump.c
sbin/isakmpd/pf_key_v2.c
sys/net/pfkeyv2.c
sys/net/pfkeyv2.h
sys/net/pfkeyv2_convert.c
sys/net/pfkeyv2_parsemessage.c
sys/netinet/in.h
sys/netinet/in_pcb.c
sys/netinet/in_pcb.h
sys/netinet/ip_ipsp.c
sys/netinet/ip_ipsp.h
sys/netinet/ip_output.c
sys/netinet/ip_spd.c
sys/netinet/tcp_input.c
sys/netinet/udp_usrreq.c