svn commit: r323770 - in stable/11/sys: amd64/conf arm64/conf i386/conf powerpc/conf riscv/conf sparc64/conf

[Alexey Dokuchaev]

On Wed, Sep 20, 2017 at 08:58:59AM -0500, Josh Paetzel wrote:
> On Wed, Sep 20, 2017, at 02:41 AM, Ngie Cooper (yaneurabeya) wrote:
> > > On Sep 19, 2017, at 09:51, Josh Paetzel <jpaetzel at FreeBSD.org> wrote:
> > > New Revision: 323770
> > > URL: https://svnweb.freebsd.org/changeset/base/323770
> > > 
> > > Log:
> > >  MFC: 323068
> > > 
> > >    Allow kldload tcpmd5
> > 
> > Wasn't this reverted on ^/head ?
> 
> Not this one.  What was reverted on HEAD was the removal of options
> IPSEC from GENERIC.
> 
> The endgoal is options IPSEC and options IPSEC_SUPPORT in GENERIC, which
> will allow someone running GENERIC to kldload tcpmd5.

I'll shamelessly steal this thread to ask somewhat related question that
was bothering me since the original botched commit: what is the reason
behind IPSEC_SUPPORT option?  If it does not cost anything, why not just
optimize it away; if it does imply something more, can you shed some
light on why is it needed (and/or might not be)?  Thanks,

./danfe