summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl/pfkey.c
diff options
context:
space:
mode:
authorMike Belopuhov <mikeb@cvs.openbsd.org>2010-10-06 22:19:21 +0000
committerMike Belopuhov <mikeb@cvs.openbsd.org>2010-10-06 22:19:21 +0000
commit17b1c63ba51e1c8f58ef89ffe4953e3a7a8144ed (patch)
tree3875af8f630ab070970dc9e8309534f215fe4b06 /sbin/ipsecctl/pfkey.c
parent11582097cde9bb4bf4acb463d2661d972fc67353 (diff)
Retire Skipjack
There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts.
Diffstat (limited to 'sbin/ipsecctl/pfkey.c')
-rw-r--r--sbin/ipsecctl/pfkey.c5
1 files changed, 1 insertions, 4 deletions
diff --git a/sbin/ipsecctl/pfkey.c b/sbin/ipsecctl/pfkey.c
index ad8dc2c14ad..0c134162419 100644
--- a/sbin/ipsecctl/pfkey.c
+++ b/sbin/ipsecctl/pfkey.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: pfkey.c,v 1.50 2010/09/22 14:04:09 mikeb Exp $ */
+/* $OpenBSD: pfkey.c,v 1.51 2010/10/06 22:19:20 mikeb Exp $ */
/*
* Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>
* Copyright (c) 2003, 2004 Markus Friedl <markus@openbsd.org>
@@ -515,9 +515,6 @@ pfkey_sa(int sd, u_int8_t satype, u_int8_t action, u_int32_t spi,
case ENCXF_NULL:
sa.sadb_sa_encrypt = SADB_EALG_NULL;
break;
- case ENCXF_SKIPJACK:
- sa.sadb_sa_encrypt = SADB_X_EALG_SKIPJACK;
- break;
default:
warnx("unsupported encryption algorithm %d",
xfs->encxf->id);