svn commit: r361044 - in stable: 11/share/man/man4 11/sys/dev/ubsec 12/share/man/man4 12/sys/dev/ubsec

[John Baldwin]

Author: jhb
Date: Thu May 14 18:59:34 2020
New Revision: 361044
URL: https://svnweb.freebsd.org/changeset/base/361044

Log:
  MFC 360710: Deprecate ubsec(4) for FreeBSD 13.0.
  
  With the removal of in-tree consumers of DES, Triple DES, and
  MD5-HMAC, the only algorithm this driver still supports is SHA1-HMAC.
  This is not very useful as a standalone algorithm (IPsec AH-only with
  SHA1 would be the only user).
  
  This driver has also not been kept up to date with the original driver
  in OpenBSD which supports a few more cards and AES-CBC on newer cards.
  The newest card currently supported by this driver was released in
  2005.
  
  Relnotes:	yes

Modified:
  stable/12/share/man/man4/ubsec.4
  stable/12/sys/dev/ubsec/ubsec.c
Directory Properties:
  stable/12/   (props changed)

Changes in other areas also in this revision:
Modified:
  stable/11/share/man/man4/ubsec.4
  stable/11/sys/dev/ubsec/ubsec.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/12/share/man/man4/ubsec.4
==============================================================================
--- stable/12/share/man/man4/ubsec.4	Thu May 14 18:55:45 2020	(r361043)
+++ stable/12/share/man/man4/ubsec.4	Thu May 14 18:59:34 2020	(r361044)
@@ -48,6 +48,15 @@ module at boot time, place the following line in
 .Bd -literal -offset indent
 ubsec_load="YES"
 .Ed
+.Sh DEPRECATION NOTICE
+The
+.Nm
+driver is not present in
+.Fx 13.0
+and later.
+The majority of crypto algorithms supported by this driver are no longer
+used by the kernel in
+.Fx 13.0 .
 .Sh DESCRIPTION
 The
 .Nm

Modified: stable/12/sys/dev/ubsec/ubsec.c
==============================================================================
--- stable/12/sys/dev/ubsec/ubsec.c	Thu May 14 18:55:45 2020	(r361043)
+++ stable/12/sys/dev/ubsec/ubsec.c	Thu May 14 18:59:34 2020	(r361044)
@@ -475,6 +475,7 @@ skip_rng:
 		crypto_kregister(sc->sc_cid, CRK_MOD_EXP_CRT, 0);
 #endif
 	}
+	gone_in_dev(dev, 13, "Does not support modern crypto algorithms");
 	return (0);
 bad4:
 	crypto_unregister_all(sc->sc_cid);