Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 1 Jan 2017 18:14:33 +0000 (UTC)
From:      "Andrey V. Elsukov" <ae@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-projects@freebsd.org
Subject:   svn commit: r311013 - projects/ipsec/sbin/setkey
Message-ID:  <201701011814.v01IEXMZ022308@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: ae
Date: Sun Jan  1 18:14:32 2017
New Revision: 311013
URL: https://svnweb.freebsd.org/changeset/base/311013

Log:
  TCP-MD5 SAs don't constrain the SPI value anymore.

Modified:
  projects/ipsec/sbin/setkey/setkey.8

Modified: projects/ipsec/sbin/setkey/setkey.8
==============================================================================
--- projects/ipsec/sbin/setkey/setkey.8	Sun Jan  1 17:16:47 2017	(r311012)
+++ projects/ipsec/sbin/setkey/setkey.8	Sun Jan  1 18:14:32 2017	(r311013)
@@ -29,7 +29,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd October 3, 2016
+.Dd January 1, 2017
 .Dt SETKEY 8
 .Os
 .\"
@@ -270,8 +270,6 @@ must be a decimal number, or a hexadecim
 prefix.
 SPI values between 0 and 255 are reserved for future use by IANA
 and they cannot be used.
-TCP-MD5 associations must use 0x1000 and therefore only have per-host
-granularity at this time.
 .\"
 .Pp
 .It Ar extensions



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201701011814.v01IEXMZ022308>