History log of /freebsd-current/sbin/setkey/Makefile
Revision Date Author Comments
# d0b2dbfa 16-Aug-2023 Warner Losh <imp@FreeBSD.org>

Remove $FreeBSD$: one-line sh pattern

Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/


# 1b6c9c3f 23-Mar-2020 Baptiste Daroussin <bapt@FreeBSD.org>

Remove the link to libl which only contains a stub function
on yywrap, if the flex is told yywrap is not in use, then this linkage becomes
unnecessary


# e2328be5 23-Mar-2020 Baptiste Daroussin <bapt@FreeBSD.org>

Revove useless linking to yacc


# 4c1a82ce 05-Sep-2019 Emmanuel Vadot <manu@FreeBSD.org>

pkgbase: Create a FreeBSD-utilities package and make it the default one

The default package use to be FreeBSD-runtime but it should only contain
binaries and libs enough to boot to single user and repair the system, it
is also very handy to have a package that can be tranform to a small mfsroot.
So create a new package named FreeBSD-utilities and make it the default one.
Also move a few binaries and lib into this package when it make sense.
Reviewed by: bapt, gjb
Differential Revision: https://reviews.freebsd.org/D21506


# 4e0e8f31 13-Apr-2017 Andrey V. Elsukov <ae@FreeBSD.org>

Add large replay widow support to setkey(8) and libipsec.

When the replay window size is large than UINT8_MAX, add to the request
the SADB_X_EXT_SA_REPLAY extension header that was added in r309144.

Also add support of SADB_X_EXT_NAT_T_TYPE, SADB_X_EXT_NAT_T_SPORT,
SADB_X_EXT_NAT_T_DPORT, SADB_X_EXT_NAT_T_OAI, SADB_X_EXT_NAT_T_OAR,
SADB_X_EXT_SA_REPLAY, SADB_X_EXT_NEW_ADDRESS_SRC, SADB_X_EXT_NEW_ADDRESS_DST
extension headers to the key_debug that is used by `setkey -x`.

Modify kdebug_sockaddr() to use inet_ntop() for IP addresses formatting.
And modify kdebug_sadb_x_policy() to show policy scope and priority.

Reviewed by: gnn, Emeric Poupon
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D10375


# 12211016 12-Mar-2017 Enji Cooper <ngie@FreeBSD.org>

Fix CFLAGS for including netipsec headers #includes

The netipsec headers are referenced via netipsec/..., not ./... .
Thus, assuming that the netipsec/... is nested under ${SRCTOP}/sys/netipsec
is wrong.

This tripped up some individuals building ^/head on systems pre-r314812.

MFC after: 1 week
Reported by: Roberto Rodriguez Jr <rob.rodz.jr9@gmail.com>
Sponsored by: Dell EMC Isilon


# e96ea26d 11-Mar-2017 Enji Cooper <ngie@FreeBSD.org>

Delete duplicate -I <SRCTOP>/lib/libipsec added in r171135

It's already handled earlier on in the Makefile, per the change made
in r80029.

MFC after: 1 month
Sponsored by: Dell EMC Isilon


# 22289a8c 04-Mar-2017 Enji Cooper <ngie@FreeBSD.org>

sbin: normalize paths using SRCTOP-relative paths or :H when possible

This simplifies make logic/output

MFC after: 1 month
Sponsored by: Dell EMC Isilon


# 406d87b1 09-Feb-2016 Glen Barber <gjb@FreeBSD.org>

Explicitly add more files to the 'runtime' package.

Sponsored by: The FreeBSD Foundation


# 13eb765f 25-Nov-2014 Baptiste Daroussin <bapt@FreeBSD.org>

Convert sbin/ to LIBADD
Reduce overlinking


# c6063d0d 05-May-2014 Warner Losh <imp@FreeBSD.org>

Use src.opts.mk in preference to bsd.own.mk except where we need stuff
from the latter.


# 7b6a9180 15-Jan-2013 Eitan Adler <eadler@FreeBSD.org>

Correct prefix for "locally installed things"

Approved by: cperciva
MFC After: 3 days


# a7d5f7eb 19-Oct-2010 Jamie Gritton <jamie@FreeBSD.org>

A new jail(8) with a configuration file, to replace the work currently done
by /etc/rc.d/jail.


# fe0506d7 09-Mar-2010 Marcel Moolenaar <marcel@FreeBSD.org>

Create the altix project branch. The altix project will add support
for the SGI Altix 350 to FreeBSD/ia64. The hardware used for porting
is a two-module system, consisting of a base compute module and a
CPU expansion module. SGI's NUMAFlex architecture can be an excellent
platform to test CPU affinity and NUMA-aware features in FreeBSD.


# d7f03759 19-Oct-2008 Ulf Lilleengen <lulf@FreeBSD.org>

- Import the HEAD csup code which is the basis for the cvsmode work.


# 8409aedf 30-Jun-2007 George V. Neville-Neil <gnn@FreeBSD.org>

Commit IPv6 support for FAST_IPSEC to the tree.
This commit includes all remaining changes for the time being including
user space updates.

Submitted by: bz
Approved by: re


# 491bafe5 27-Jul-2006 Yaroslav Tykhiy <ytykhiy@gmail.com>

Obey MK_INET6_SUPPORT.
This is also a good chance to apply style.Makefile(5) in some cases.


# 0625d8dc 13-Oct-2005 Hajimu UMEMOTO <ume@FreeBSD.org>

setkey(8) is not WARNS=2 compliant, yet.


# cf43a054 05-Nov-2003 Hajimu UMEMOTO <ume@FreeBSD.org>

- do hexdump on send. set length field properly
- check for encryption/authentication key together with algorithm.
- warned if a deprecated encryption algorithm (that includes "simple")
is specified.
- changed the syntax how to define a policy of a ICMPv6 type and/or a
code, like spdadd ::/0 ::/0 icmp6 134,0 -P out none;
- random cleanup in parser.
- use yyfatal, or return -1 after yyerror.
- deal with strdup() failure.
- permit scope notation in policy string (-P
esp/tunnel/foo%scope-bar%scope/use)
- simplify /prefix and [port].
- g/c some unused symbols.

Obtained from: KAME


# 9b1222a7 16-May-2002 Hajimu UMEMOTO <ume@FreeBSD.org>

Don't install scriptdump which is written in Perl. This is
corresponding to removal of Perl from base system.


# 90e655ea 20-Jul-2001 David E. O'Brien <obrien@FreeBSD.org>

Perform a major cleanup of the usr.sbin Makefiles.
These are not perfectly in agreement with each other style-wise, but they
are orders of orders of magnitude more consistent style-wise than before.


# b9ad8c86 07-Apr-2001 Ruslan Ermilov <ru@FreeBSD.org>

beforeinstall -> SCRIPTS.


# 345e52e7 26-Mar-2001 Ruslan Ermilov <ru@FreeBSD.org>

- Backout botched attempt to introduce MANSECT feature.
- MAN[1-9] -> MAN.


# c73e22c3 20-Mar-2001 Ruslan Ermilov <ru@FreeBSD.org>

Set the default manual section for usr.sbin/ to 8.


# a8e642f5 05-Dec-2000 David E. O'Brien <obrien@FreeBSD.org>

Change the spelling of `.' to `.' from .OBJDIR since `.' really is where
generated files land. Also give precedence to generated files.


# 2c5569d6 01-Dec-2000 David E. O'Brien <obrien@FreeBSD.org>

The GCC 2.96 snapshots have slightly different rules for finding include
files. Mostly -I${.CURDIR} was needed -- especially for YACC generated
files as the new cpp does not look in the ultimate source file
(ie, the .y file)'s directory as told by the "#line" directive. Some were
misspellings of "-I${.CURDIR}" as "-I.".


# 3c62e87a 04-Jul-2000 Jun-ichiro itojun Hagino <itojun@FreeBSD.org>

synchronize with latest kame tree.

behavior change: policy syntax was changed. you may need to update your
setkey(8) configuration files.


# 54672551 27-Mar-2000 Bruce Evans <bde@FreeBSD.org>

Fixed missing DPADDs.

Fixed style bug for LDADD (don't use += for initial definitions).


# 9a4365d0 05-Jan-2000 Yoshinobu Inoue <shin@FreeBSD.org>

libipsec and IPsec related apps. (and some KAME related man pages)

Reviewed by: freebsd-arch, cvs-committers
Obtained from: KAME project