svn commit: r199899 - head/sys/netipsec

[Bjoern A. Zeeb]

On Sun, 29 Nov 2009, Bjoern A. Zeeb wrote:

>  With this, after the opencrypto/deflate changes, IPcomp starts to work
>  apart from edge cases.  Leave it disabled by default until those are
>  fixed as well.

Note that after r199906 (apart from stats) IPcomp is working as good
as net/zlib.? is.  There are occational cases where we get a crypto
error.  An update to the latest zlib.? fixes this.  I do have a
patch but ideally we would want to just use an unchanged libz (we
have 2-3 copies in sys/), a version without the classic PPP changes.
For this to happen, ng_deflate will need to be "fixed"; it looks like
it could need some zlib improvements for stability anyway from reading
the code.  Anyone who uses it and can test ng_deflate is welcome to
contact me.

/bz

-- 
Bjoern A. Zeeb         It will not break if you know what you are doing.