Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Apr 2015 11:03:48 +0000 (UTC)
From:      "Andrey V. Elsukov" <ae@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r282139 - head/sys/netipsec
Message-ID:  <201504281103.t3SB3mWY009802@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: ae
Date: Tue Apr 28 11:03:47 2015
New Revision: 282139
URL: https://svnweb.freebsd.org/changeset/base/282139

Log:
  Fix the comment. We will not do SPD lookup again, because
  ip[6]_ipsec_output() will find PACKET_TAG_IPSEC_OUT_DONE mbuf tag.
  
  Sponsored by:	Yandex LLC

Modified:
  head/sys/netipsec/ipsec_output.c

Modified: head/sys/netipsec/ipsec_output.c
==============================================================================
--- head/sys/netipsec/ipsec_output.c	Tue Apr 28 10:59:06 2015	(r282138)
+++ head/sys/netipsec/ipsec_output.c	Tue Apr 28 11:03:47 2015	(r282139)
@@ -206,8 +206,7 @@ ipsec_process_done(struct mbuf *m, struc
 
 	/*
 	 * We're done with IPsec processing, transmit the packet using the
-	 * appropriate network protocol (IP or IPv6). SPD lookup will be
-	 * performed again there.
+	 * appropriate network protocol (IP or IPv6).
 	 */
 	switch (saidx->dst.sa.sa_family) {
 #ifdef INET



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201504281103.t3SB3mWY009802>