CVSROOT: /cvs Module name: src Changes by: to...@cvs.openbsd.org 2019/12/10 10:58:54
Modified files:
sys/netinet : ip_spd.c
Log message:
Make bundled IPcomp/ESP policies work with IPSEC_LEVEL_REQUIRE.
We only install flows for IPcomp. When processing an incoming ESP SA,
look for a bundled IPcomp SA and use that in the policy check.
ok bluhm@
