git: 74d330943b57 - main - tcp md5: improve consistency

From: Michael Tuexen <tuexen_at_FreeBSD.org>
Date: Fri, 04 Sep 2026 07:40:52 UTC
The branch main has been updated by tuexen:

URL: https://cgit.FreeBSD.org/src/commit/?id=74d330943b572a6f17f45b7c9c2035bde2956380

commit 74d330943b572a6f17f45b7c9c2035bde2956380
Author:     Michael Tuexen <tuexen@FreeBSD.org>
AuthorDate: 2026-09-04 07:37:45 +0000
Commit:     Michael Tuexen <tuexen@FreeBSD.org>
CommitDate: 2026-09-04 07:37:45 +0000

    tcp md5: improve consistency
    
    All other usages of SCF_SIGNATURE are protected by IPSEC_SUPPORT
    or TCP_SIGNATURE.
    No functional change intended.
    
    Reported by:    Hannes Elfert
    MFC after:      1 week
    MFC to:         stable/14
    MFC to:         stable/15
---
 sys/netinet/tcp_syncache.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/netinet/tcp_syncache.c b/sys/netinet/tcp_syncache.c
index 3a447703b628..d6583db4c15d 100644
--- a/sys/netinet/tcp_syncache.c
+++ b/sys/netinet/tcp_syncache.c
@@ -2385,8 +2385,10 @@ syncookie_expand(struct in_conninfo *inc, const struct syncache_head *sch,
 		sc->sc_tsoff = tcp_new_ts_offset(inc);
 	}
 
+#if defined(IPSEC_SUPPORT) || defined(TCP_SIGNATURE)
 	if (to->to_flags & TOF_SIGNATURE)
 		sc->sc_flags |= SCF_SIGNATURE;
+#endif
 
 	sc->sc_rxmits = 0;