freebsd-skq/usr.sbin/setkey
Brian Somers f1b1c5da22 Allow `ip4'' as an `upperspec'' value, and update the man
page with *all* the permissible values.

This should really be spelt ipencap (as /etc/protocols does),
but a precedent has already been set by the ipproto array in
setkey.c.

It would be nice if /etc/protocols was parsed for the upperspec
field, but I don't do yacc/lex...

This change allows policies that only encrypt the encapsulated
packets passing between the endpoints of a gif tunnel.  Setting
such a policy means that you can still talk directly (and
unencrypted) between the public IP numbers with (say) ssh.

MFC after:	1 week
2001-05-17 15:30:49 +00:00
..
Makefile beforeinstall -> SCRIPTS. 2001-04-07 11:21:35 +00:00
parse.y synchronize with latest kame tree. 2000-07-04 16:22:05 +00:00
sample.cf synchronize with latest kame tree. 2000-07-04 16:22:05 +00:00
scriptdump.pl synchronize with latest kame tree. 2000-07-04 16:22:05 +00:00
setkey.8 Allow `ip4'' as an `upperspec'' value, and update the man 2001-05-17 15:30:49 +00:00
setkey.c synchronize with latest kame tree. 2000-07-04 16:22:05 +00:00
test-pfkey.c synchronize with latest kame tree. 2000-07-04 16:22:05 +00:00
test-policy.c
token.l Allow `ip4'' as an `upperspec'' value, and update the man 2001-05-17 15:30:49 +00:00
vchar.h synchronize with latest kame tree. 2000-07-04 16:22:05 +00:00