Author: jhb
Date: Thu May 14 19:29:08 2020
New Revision: 361049
URL: https://svnweb.freebsd.org/changeset/base/361049
Log:
MF11 361044,361048: Deprecate ubsec(4) for FreeBSD 13.0.
With the removal of in-tree consumers of DES, Triple DES, and
MD5-HMAC, the only algorithm this driver still supports is SHA1-HMAC.
This is not very useful as a standalone algorithm (IPsec AH-only with
SHA1 would be the only user).
This driver has also not been kept up to date with the original driver
in OpenBSD which supports a few more cards and AES-CBC on newer cards.
The newest card currently supported by this driver was released in
2005.
Approved by: re (gjb)
Relnotes: yes
Modified:
releng/11.4/share/man/man4/ubsec.4
releng/11.4/sys/dev/ubsec/ubsec.c
Directory Properties:
releng/11.4/ (props changed)
Modified: releng/11.4/share/man/man4/ubsec.4
==============================================================================
--- releng/11.4/share/man/man4/ubsec.4 Thu May 14 19:15:21 2020
(r361048)
+++ releng/11.4/share/man/man4/ubsec.4 Thu May 14 19:29:08 2020
(r361049)
@@ -26,7 +26,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd May 16, 2009
+.Dd May 14, 2020
.Dt UBSEC 4
.Os
.Sh NAME
@@ -48,6 +48,15 @@ module at boot time, place the following line in
.Bd -literal -offset indent
ubsec_load="YES"
.Ed
+.Sh DEPRECATION NOTICE
+The
+.Nm
+driver is not present in
+.Fx 13.0
+and later.
+The majority of crypto algorithms supported by this driver are no longer
+used by the kernel in
+.Fx 13.0 .
.Sh DESCRIPTION
The
.Nm
Modified: releng/11.4/sys/dev/ubsec/ubsec.c
==============================================================================
--- releng/11.4/sys/dev/ubsec/ubsec.c Thu May 14 19:15:21 2020
(r361048)
+++ releng/11.4/sys/dev/ubsec/ubsec.c Thu May 14 19:29:08 2020
(r361049)
@@ -474,6 +474,7 @@ skip_rng:
crypto_kregister(sc->sc_cid, CRK_MOD_EXP_CRT, 0);
#endif
}
+ gone_in_dev(dev, 13, "Does not support modern crypto algorithms");
return (0);
bad4:
crypto_unregister_all(sc->sc_cid);
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "[email protected]"
