Hi, Allow raw IPv6 sockets for IPsec protocols.
ok? bluhm Index: netinet6/in6_proto.c =================================================================== RCS file: /data/mirror/openbsd/cvs/src/sys/netinet6/in6_proto.c,v retrieving revision 1.65 diff -u -p -r1.65 in6_proto.c --- netinet6/in6_proto.c 14 Mar 2013 11:18:37 -0000 1.65 +++ netinet6/in6_proto.c 31 Mar 2013 00:20:38 -0000 @@ -176,20 +176,20 @@ struct ip6protosw inet6sw[] = { }, #ifdef IPSEC { SOCK_RAW, &inet6domain, IPPROTO_AH, PR_ATOMIC|PR_ADDR, - ah6_input, 0, 0, 0, - 0, + ah6_input, rip6_output, 0, rip6_ctloutput, + rip6_usrreq, 0, 0, 0, 0, ah_sysctl, }, { SOCK_RAW, &inet6domain, IPPROTO_ESP, PR_ATOMIC|PR_ADDR, - esp6_input, 0, 0, 0, - 0, + esp6_input, rip6_output, 0, rip6_ctloutput, + rip6_usrreq, 0, 0, 0, 0, esp_sysctl, }, { SOCK_RAW, &inet6domain, IPPROTO_IPCOMP, PR_ATOMIC|PR_ADDR, - ipcomp6_input, 0, 0, 0, - 0, + ipcomp6_input, rip6_output, 0, rip6_ctloutput, + rip6_usrreq, 0, 0, 0, 0, ipcomp_sysctl, },