Add an option --enable-wildcard-match to enable wildcard matching and explain
why we might want it and why it is a bad idea in general that's why it is
not enabled by default. ok tteras@, manu@

Fix errors from automake 1.13

From Götz Babin-Ebell <g.babin-ebell@novamedia.de:
Require OpenSSL 0.9.8s or higher

branches: 1.11.6;
From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Enhance splitnet
environment variable string value generation.

branches: 1.10.6; 1.10.10;
Detect if monotonic system clock is available, and use it for relative
time measurements to avoid complite hang if time jumps backwards.

Remove "fastquit" configure option and make it the default behaviour. The
previous normal behaviour is buggy, as after flush kernel can immediately
create larval SA:s which would prevent exit.

Fix a CPPLAGS typo to CPPFLAGS which was intended

branches: 1.7.4;
From Christian Hohnstaedt: allow out of tree building

branches: 1.6.6; 1.6.8;
Fix autoconf check for selinux support. Submitted by Joy Latten.

branches: 1.5.4; 1.5.6;
use a single PATH_IPSEC_H to fix some path_to_ipsec.h issues

Missing stuff for SELinux

branches: 1.3.4;
From Joy Latten: Add support for SELinux security contexts. Also cleanup the
libipsec interface for adding and updating security associations.

branches: 1.2.2;
Camelia cipher support as in RFC 4312, from Tomoyuki Okazaki
<okazaki@kick.gr.jp>

branches: 1.1.1;
Initial revision

Migrate ipsec-tools CVS to cvs.netbsd.org

Import IPsec-tools 0.6.3. This fixes several bugs, including bugs that
caused DoS.

Import ipsec-tools-0.6.2. Here is the ChangeLog since 0.6.1 (most of them
have already been pulled up in NetBSD CVS)

Import ipsec-tools 0.6.1

Update ipsec-tools to 0.6.1rc1
Most of the changes since 0.6b4 have already been committed to the NetBSD
tree. This upgrade fixes some IPcomp and NAT-T related problems that were
left unadressed in the NetBSD tree.

branches: 1.1.1.4.2;
Import ipsec-tools ipsec-tools-0_6-20050314

Import ipsec-tools ipsec-tools-0_6-20050224

Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported version
according to ipsec-tools' ChangeLog:

2005-02-23 Emmanuel Dreyfus <manu@netbsd.org>

* configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal
support for patented algorithms: IDEA and RC5.
* src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it
is not required in the configuration
* src/racoon/isakmp.c: do not reject addresses for which kernel
refused UDP encapsulation, they can still be used for non NAT-T
traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)

2005-02-18 Emmanuel Dreyfus <manu@netbsd.org>

* src/racoon/{main.c|eaytest.c|plairsa-gen.c}
src/setkey/setkey.c: don't use fuzzy paths for package_version.h

2005-02-18 Yvan Vanhullebus <vanhu@free.fr>

* src/racoon/isakmp_inf.c: Purge generated SPDs when getting a
related DELETE_SA
* src/racoon/pfkey.c: do NOT unbindph12() when SA acquire

2005-02-17 Emmanuel Dreyfus <manu@netbsd.org>

From Fred Senault <fred.letter@lacave.net>
* src/racoon/remoteconf.c: Fix a bug in script init

2005-02-17 Yvan Vanhullebus <vanhu@free.fr>

* src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks

2005-02-15 Michal Ludvig <michal@logix.cz>

* configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN

Import ipsec-tools (tag ipsec-tools-0_6-base in ipsec-tools CVS)
ipsec-tools is a fork from KAME racoon/libipsec/setkey, with many
enhancements.

Apply patch (requested by manu in ticket #981):
Update ipsec-tools to version 0.6.3.

Pull up the following revisions (requested by manu in ticket #894):
crypto/dist/ipsec-tools/ChangeLog 1.28-1.30
crypto/dist/ipsec-tools/NEWS 1.1.1.4
crypto/dist/ipsec-tools/configure.ac 1.1.1.7
crypto/dist/ipsec-tools/src/libipsec/pfkey.c 1.7-1.8
crypto/dist/ipsec-tools/src/libipsec/pfkey_dump.c 1.10
crypto/dist/ipsec-tools/src/libipsec/policy_parse.y 1.7
crypto/dist/ipsec-tools/src/racoon/cfparse.y 1.5-1.9
crypto/dist/ipsec-tools/src/racoon/evt.c 1.3
crypto/dist/ipsec-tools/src/racoon/ipsec_doi.c 1.11
crypto/dist/ipsec-tools/src/racoon/isakmp.c 1.10
crypto/dist/ipsec-tools/src/racoon/isakmp_agg.c 1.5-1.6
crypto/dist/ipsec-tools/src/racoon/isakmp_base.c 1.3-1.4
crypto/dist/ipsec-tools/src/racoon/isakmp_ident.c 1.3
crypto/dist/ipsec-tools/src/racoon/oakley.c 1.6
crypto/dist/ipsec-tools/src/racoon/pfkey.c 1.10
crypto/dist/ipsec-tools/src/racoon/policy.c 1.3
crypto/dist/ipsec-tools/src/racoon/racoon.conf.5 1.21-1.23
crypto/dist/ipsec-tools/src/racoon/sockmisc.c 1.3
crypto/dist/ipsec-tools/src/racoon/sockmisc.h 1.5
crypto/dist/ipsec-tools/src/setkey/setkey.8 1.17
lib/libipsec/package_version.h 1.15

Update to ipsec-tools 0.6.2

Apply patch (requested by tron in ticket #741):
Update ipsec-tools to version 0.6.1.

Upgrade ipsec-tools to release 0.7.1 (requested by manu in ticket #1183).

branches: 1.2.2.2.2;
Pull up following revision(s) (requested by manu in ticket #830):

Import ipsec-tools 0.7

branches: 1.2.2.1.2;
Upgrade ipsec-tools to 0.7-beta3 (Requested by manu in ticket #634).

Upgrade ipsec-tools to release 0.7.1 (requested by manu in ticket #1183).

Sync with netbsd-4.

Sync w/ NetBSD-4-RC_1

0.7.3 release

Updates for 0.7.2 release

Fix a CPPLAGS typo to CPPFLAGS which was intended

0.7.1 coming !

Fix autoconf check for selinux support. Submitted by Joy Latten.

Prepare for 0.7 release tag.

use a single PATH_IPSEC_H to fix some path_to_ipsec.h issues

ipsec-tools used to use tags in lower case

0.7-RC1

Bump to 0.7beta3

Bump to 0.7beta2

Bump to 0.7beta1

Missing stuff for SELinux

use a single PATH_IPSEC_H to fix some path_to_ipsec.h issues

file configure.ac was added on branch matt-mips64 on 2007-07-18 12:07:51 +0000

sync with HEAD

Sync w/ -current. 34 merge conflicts to follow.

sync with head.

Apply patch (requested by manu/spz in #378):
Downgrade ipsec-tools to 0.7.1nb1.

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")

sync with head

sync with head

ipsec-tools-0.8.2

ipsec-tools-0.8.1

Fix errors from automake 1.13

From Götz Babin-Ebell <g.babin-ebell@novamedia.de>:
Require OpenSSL 0.9.8s or higher

Yes: 0.8.0 is out !!!

resync from head

resync with head