summaryrefslogtreecommitdiff
path: root/sys/netinet6
diff options
context:
space:
mode:
authorBjoern A. Zeeb <bz@FreeBSD.org>2008-03-21 23:03:32 +0000
committerBjoern A. Zeeb <bz@FreeBSD.org>2008-03-21 23:03:32 +0000
commit3b979a31b37a889e713fa4a6111312f5a1d11dd5 (patch)
tree2b0710263e18e7a45508648cfb53310ffa357a88 /sys/netinet6
parent05be4eed72c69f8f49676aed6b0ecfde33324c6e (diff)
Notes
Diffstat (limited to 'sys/netinet6')
-rw-r--r--sys/netinet6/ip6_ipsec.c10
-rw-r--r--sys/netinet6/ip6_ipsec.h4
2 files changed, 8 insertions, 6 deletions
diff --git a/sys/netinet6/ip6_ipsec.c b/sys/netinet6/ip6_ipsec.c
index 5e13241e5ddc..c5c8cbeb9ed5 100644
--- a/sys/netinet6/ip6_ipsec.c
+++ b/sys/netinet6/ip6_ipsec.c
@@ -312,6 +312,7 @@ bad:
return 0;
}
+#if 0
/*
* Compute the MTU for a forwarded packet that gets IPSEC encapsulated.
* Called from ip_forward().
@@ -327,16 +328,15 @@ ip6_ipsec_mtu(struct mbuf *m)
* tunnel MTU = if MTU - sizeof(IP) - ESP/AH hdrsiz
* XXX quickhack!!!
*/
+#ifdef IPSEC
struct secpolicy *sp = NULL;
int ipsecerror;
int ipsechdr;
struct route *ro;
-#ifdef IPSEC
sp = ipsec_getpolicybyaddr(m,
IPSEC_DIR_OUTBOUND,
IP_FORWARDING,
&ipsecerror);
-#endif /* IPSEC */
if (sp != NULL) {
/* count IPsec header size */
ipsechdr = ipsec4_hdrsiz(m,
@@ -359,10 +359,10 @@ ip6_ipsec_mtu(struct mbuf *m)
mtu -= ipsechdr;
}
}
-#ifdef IPSEC
KEY_FREESP(&sp);
-#endif /* IPSEC */
}
+#endif /* IPSEC */
+ /* XXX else case missing. */
return mtu;
}
-
+#endif
diff --git a/sys/netinet6/ip6_ipsec.h b/sys/netinet6/ip6_ipsec.h
index 2b5668dbae3e..cbc1460f75fa 100644
--- a/sys/netinet6/ip6_ipsec.h
+++ b/sys/netinet6/ip6_ipsec.h
@@ -35,7 +35,9 @@
int ip6_ipsec_filtertunnel(struct mbuf *);
int ip6_ipsec_fwd(struct mbuf *);
int ip6_ipsec_input(struct mbuf *, int);
-int ip6_ipsec_mtu(struct mbuf *);
int ip6_ipsec_output(struct mbuf **, struct inpcb *, int *, int *,
struct ifnet **, struct secpolicy **sp);
+#if 0
+int ip6_ipsec_mtu(struct mbuf *);
+#endif
#endif