- in script mode always output errors to stderr prefixed by the program name.
- in command mode always output errors to stdout not prefixed " " "
- perror(3) -> warn(3)

Keep track of the filename to print in error messages.
Change quoting of error string from [] to `'.

mark promisc() __dead - it never returns.

Clean up setkey: remove dead wood, KNF, localify, and slightly improve.

drop __P, suggested by sevan

fix -Wold-style-definition

Accept - as stdin
Be nice and let the user know which file it could not open.

replace questionable pointer games which could cause reads of
uninitialized memory, from Wolfgang Stukenbrock per PR bin/44951

From Paul Wenau: Check fgets return value in setkey to make gcc happy.

setkey: fix deleteall in Linux

Linux requires SADB_DELETE message to have SPI. So send
a SADB_DELETE message for each matching SA. Trac #284.

From: Gabriel Somlo <somlo@cmu.edu>

use a single PATH_IPSEC_H to fix some path_to_ipsec.h issues

Migration of ipsec-tools to NetBSD CVS part 2: resolving the import conflicts.
Since we previously had a release branch and we import here the HEAD of CVS,
let's assume all local changes are to be du

Migration of ipsec-tools to NetBSD CVS part 2: resolving the import conflicts.
Since we previously had a release branch and we import here the HEAD of CVS,
let's assume all local changes are to be dumped. Local patches should have
been propagated upstream, anyway.

show more ...

Add NAT ports to SAD in setkey so that NAT SAD entries generated by
racoon can be removed by hand.

Merge ipsec-tools 0.6.3 import

Update to ipsec-tools 0.6.1

Resolve conflicts caused by recent ipsec-tools-0.6.1rc1 import by prefering
the newer software. Some useful local change might have been overwritten,
we'll take care of this soon.

Collect externs into one file instead of duplicating them everywhere.

Fix compiler warnings.

Bug fixes from the ipsec-tools 0.6 branch:
- Fix NAT-T problems that prevented multiple peers behind the same NAT
to talk to the same machine outside the NAT. This also require kernel
fixes (alre

Bug fixes from the ipsec-tools 0.6 branch:
- Fix NAT-T problems that prevented multiple peers behind the same NAT
to talk to the same machine outside the NAT. This also require kernel
fixes (already committed eralier)
- Fix a LP64 bug
- Fix NAT-T RFC conformance bugs (missing non ESP marker in packets)
- Add a -p option to setkey to display ports that could be used for ESP
over UDP when printing policies

show more ...

Resolve conficts and remove autoconf files that were committed by mistake

Alter the include path for package_version.h so that it has a chance
of working in our source tree.

Import ipsec-tools (tag ipsec-tools-0_6-base in ipsec-tools CVS)
ipsec-tools is a fork from KAME racoon/libipsec/setkey, with many
enhancements.