CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/05/14 06:26:44
Modified files:
usr.sbin/bgpd : bgpd.c session.c
Log message:
If either tcp_md5_set() or pfkey_establish() fail then also fail the
ongoing connect.
The old graceful failure mode was added for strange cases like kernels
without TCP MD5 support but there is honestly no good reason to limp along.
The correct way to handle this on such broken systems is to edit the config
and remove the auth settings. After that a bgpctl reload will fix the problem
by skipping the TCP MD5 or IPSec setup.
Reported by Frank Denis
OK tb@
