---
- branch: MAIN
  date: Wed Dec 26 08:55:14 UTC 2018
  files:
  - new: '1.20'
    old: '1.19'
    path: src/sys/net/if_ipsec.c
    pathrev: src/sys/net/if_ipsec.c@1.20
    type: modified
  - new: '1.259'
    old: '1.258'
    path: src/sys/netipsec/key.c
    pathrev: src/sys/netipsec/key.c@1.259
    type: modified
  id: 20181226T085514Z.75783c07cb46d7f4c7bfc0de0fb36351965fbb92
  log: |
    Remove unnecessary addresses in PF_KEY message.

    MOBIKE Extensions for PF_KEY draft-schilcher-mobike-pfkey-extension-01.txt says
    ====================
    5.  SPD Update
    // snip
       SADB_X_SPDADD:
    // snip
          sadb_x_ipsecrequest_reqid:

             An ID for that SA can be passed to the kernel in the
             sadb_x_ipsecrequest_reqid field.

          If tunnel mode is specified, the sadb_x_ipsecrequest structure is
          followed by two sockaddr structures that define the tunnel
          endpoint addresses.  In the case that transport mode is used, no
          additional addresses are specified.
    ====================
    see: https://tools.ietf.org/html/draft-schilcher-mobike-pfkey-extension-01

    ipsecif(4) uses transport mode, so it should not add addresses.
  module: src
  subject: 'CVS commit: src/sys'
  unixtime: '1545814514'
  user: knakahara