--=_courier-15016-1053230974-0001-2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
On Sun, May 18, 2003 at 01:40:28PM +1000, James Morris wrote:
>
> How would users know what the minimally required set of algorithms are?
> Would they then know to go _back_ to the networking menu to enable the
> protocols?
Good point. What about this patch then?
--
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--=_courier-15016-1053230974-0001-2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename=p
Index: net/ipv4/Kconfig
===================================================================
RCS file: /home/gondolin/herbert/src/CVS/debian/kernel-source-2.5/net/ipv4/Kconfig,v
retrieving revision 1.1.1.4
retrieving revision 1.3
diff -u -r1.1.1.4 -r1.3
--- net/ipv4/Kconfig 4 May 2003 23:53:36 -0000 1.1.1.4
+++ net/ipv4/Kconfig 18 May 2003 04:02:20 -0000 1.3
@@ -348,8 +348,12 @@
If unsure, say N.
+comment "Cryptographic HMAC support is needed for IPv4 AH or ESP support"
+ depends on INET && CRYPTO_HMAC=n
+
config INET_AH
tristate "IP: AH transformation"
+ depends on INET && CRYPTO_HMAC
---help---
Support for IPsec AH.
@@ -357,6 +361,7 @@
config INET_ESP
tristate "IP: ESP transformation"
+ depends on INET && CRYPTO_HMAC
---help---
Support for IPsec ESP.
@@ -364,6 +369,7 @@
config INET_IPCOMP
tristate "IP: IPComp transformation"
+ depends on INET
---help---
Support for IP Paylod Compression (RFC3173), typically needed
for IPsec.
Index: net/ipv6/Kconfig
===================================================================
RCS file: /home/gondolin/herbert/src/CVS/debian/kernel-source-2.5/net/ipv6/Kconfig,v
retrieving revision 1.1.1.3
retrieving revision 1.3
diff -u -r1.1.1.3 -r1.3
--- net/ipv6/Kconfig 24 Mar 2003 22:00:39 -0000 1.1.1.3
+++ net/ipv6/Kconfig 18 May 2003 04:02:20 -0000 1.3
@@ -17,9 +17,12 @@
See <file:Documentation/networking/ip-sysctl.txt> for details.
+comment "Cryptographic HMAC support is needed for IPv6 AH or ESP support"
+ depends on IPV6 && CRYPTO_HMAC=n
+
config INET6_AH
tristate "IPv6: AH transformation"
- depends on IPV6
+ depends on IPV6 && CRYPTO_HMAC
---help---
Support for IPsec AH.
@@ -27,7 +30,7 @@
config INET6_ESP
tristate "IPv6: ESP transformation"
- depends on IPV6
+ depends on IPV6 && CRYPTO_HMAC
---help---
Support for IPsec ESP.
--=_courier-15016-1053230974-0001-2--