Hi,
Allow raw IPv6 sockets for IPsec protocols.
ok?
bluhm
Index: netinet6/in6_proto.c
===================================================================
RCS file: /data/mirror/openbsd/cvs/src/sys/netinet6/in6_proto.c,v
retrieving revision 1.65
diff -u -p -r1.65 in6_proto.c
--- netinet6/in6_proto.c 14 Mar 2013 11:18:37 -0000 1.65
+++ netinet6/in6_proto.c 31 Mar 2013 00:20:38 -0000
@@ -176,20 +176,20 @@ struct ip6protosw inet6sw[] = {
},
#ifdef IPSEC
{ SOCK_RAW, &inet6domain, IPPROTO_AH, PR_ATOMIC|PR_ADDR,
- ah6_input, 0, 0, 0,
- 0,
+ ah6_input, rip6_output, 0, rip6_ctloutput,
+ rip6_usrreq,
0, 0, 0, 0,
ah_sysctl,
},
{ SOCK_RAW, &inet6domain, IPPROTO_ESP, PR_ATOMIC|PR_ADDR,
- esp6_input, 0, 0, 0,
- 0,
+ esp6_input, rip6_output, 0, rip6_ctloutput,
+ rip6_usrreq,
0, 0, 0, 0,
esp_sysctl,
},
{ SOCK_RAW, &inet6domain, IPPROTO_IPCOMP, PR_ATOMIC|PR_ADDR,
- ipcomp6_input, 0, 0, 0,
- 0,
+ ipcomp6_input, rip6_output, 0, rip6_ctloutput,
+ rip6_usrreq,
0, 0, 0, 0,
ipcomp_sysctl,
},
