CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2017/04/14 12:06:28
Modified files:
sbin/ipsecctl : ipsec.conf.5 ipsecctl.h parse.y
Log message:
Up to now ipsecctl(8) grouped SAs with identical src and dst to the
flow which the first SA matched by the flow type. This behaviour
was mostly undocumented and unexpected. Make SA bundles explicit
in ipsec.conf(5). Only group SAs that have the same src and dst
and also the same bundle identifier.
OK hshoexer@
