cvs commit: src/sys/netinet6 in6_pcb.c

[Crist J. Clark]

On Mon, Feb 09, 2004 at 03:59:05PM +0900, Hajimu UMEMOTO wrote:
> Hi,
> 
> >>>>> On Sun, 8 Feb 2004 21:34:27 -0800
> >>>>> "Crist J. Clark" <cristjc at comcast.net> said:
> 
> cristjc> On Tue, Jan 27, 2004 at 07:57:16AM -0800, Hajimu UMEMOTO wrote:
> > ume         2004/01/27 07:57:16 PST
> > 
> >   FreeBSD src repository
> > 
> >   Modified files:        (Branch: RELENG_5_2)
> >     sys/netinet6         in6_pcb.c 
> >   Log:
> >   MFC 1.47: call ipsec_pcbconn()/ipsec_pcbdisconn() from in6_pcbconnect().
> >   
> >   Approved by:    re (scott)
> >   
> >   Revision  Changes    Path
> >   1.45.2.1  +7 -0      src/sys/netinet6/in6_pcb.c
> 
> cristjc> FWIW, this prevents an INET6 kernel from building without IPSEC. Of
> cristjc> course, since IPsec is required in IPv6, this may not be a
> cristjc> bug.
> 
> The part where IPSEC is required is enclosed with #ifdef IPSEC.  So, I
> cannot believe that it breaks building without IPSEC.  Please show me
> the error message?

Sorry, there is another dependency. You must have FAST_IPSEC defined
instead of IPSEC. The errors are,

  /usr/src/sys/netinet6/in6_pcb.c: In function `in6_pcbconnect':
  /usr/src/sys/netinet6/in6_pcb.c:410: warning: implicit declaration of function `ipsec_pcbconn'
  /usr/src/sys/netinet6/in6_pcb.c: In function `in6_pcbdisconnect':
  /usr/src/sys/netinet6/in6_pcb.c:425: warning: implicit declaration of function `ipsec_pcbdisconn'

The preprocessor directives at the top set IPSEC when FAST_IPSEC is
true.

So to rephrase, you cannot build INET6 and FAST_IPSEC (which only does
IPv4 IPsec) in the same kernel.
-- 
Crist J. Clark                     |     cjclark at alum.mit.edu
                                   |     cjclark at jhu.edu
http://people.freebsd.org/~cjc/    |     cjc at freebsd.org