Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 29 Jul 2015 10:35:52 -0400
From:      "George Neville-Neil" <gnn@neville-neil.com>
To:        "Adrian Chadd" <adrian.chadd@gmail.com>
Cc:        "Daniel Plominski" <Daniel@plominski.eu>, freebsd-security@freebsd.org, "FreeBSD Net" <freebsd-net@freebsd.org>
Subject:   Re: remove IPsec SKIPJACK support...
Message-ID:  <AD9A5E4B-73C5-46EE-A20D-4260EFC48090@neville-neil.com>
In-Reply-To: <CAJ-VmonhV2oCem4ZDnPdPOzk5H%2BGxK77VQQVQjJKS_9ZWv-mSA@mail.gmail.com>
References:  <20150728005730.GL78154@funkthat.com> <1DB60250-D362-4115-92F6-E27B7A5897C3@netgate.com> <20150728034157.GO78154@funkthat.com> <5E419103-3111-4ADC-A49F-B703BBBC9C5F@netgate.com> <20150728060740.GP78154@funkthat.com> <55B768DC.6020009@Plominski.eu> <CAJ-VmonhV2oCem4ZDnPdPOzk5H%2BGxK77VQQVQjJKS_9ZWv-mSA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
That's fine so long as its removed in HEAD now, and then the warning can =

go into 10 aka 10.3.

Best,
George


On 28 Jul 2015, at 13:25, Adrian Chadd wrote:

> Hi,
>
> I'd put together a deprecation plan, which starts with the kernel
> warning that this stuff is being removed, MFC that to stable/10 and
> stable/9 so people aren't surprised when they upgrade, and then have
> it removed in 11.
>
>
>
> -adrian
>
>
> On 28 July 2015 at 04:34, Daniel Plominski <Daniel@plominski.eu> =

> wrote:
>> instead of code to remove it is a better idea manuals to revise, =

>> people
>> depend on old recommendations like
>> https://www.freebsd.org/doc/handbook/ipsec.html
>>
>> would be better:
>> https://blog.plitc.eu/2014/freebsd-10-ipv4-vpn-relay-ipsec-entryopenvp=
n-middleopenvpn-exit-node-mit-jails/
>>
>> or the racoon example from:
>> https://blog.plitc.eu/2014/freebsd-10-ipv4-ipsec-net-to-net-vpn-in-der=
-jail/
>>
>> best regards
>>
>> Daniel
>>
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AD9A5E4B-73C5-46EE-A20D-4260EFC48090>