starter: Remove IPsec stack detection
Checking specifically for /proc/net/pfkey is not ideal as af_key will eventually be removed in Linux kernels. Support for KLIPS is long gone. The detection also wasn't used for anything anymore (failures were just ignored since the ports to BSD-based systems). And modprobing doesn't seem to be necessary either (charon-systemd doesn't do that, for instance).
This commit is contained in:
@@ -41,8 +41,6 @@
|
||||
#include "files.h"
|
||||
#include "starterstroke.h"
|
||||
#include "invokecharon.h"
|
||||
#include "netkey.h"
|
||||
#include "klips.h"
|
||||
#include "cmp.h"
|
||||
|
||||
#ifndef LOG_AUTHPRIV
|
||||
@@ -522,19 +520,6 @@ int main (int argc, char **argv)
|
||||
exit(LSB_RC_INVALID_ARGUMENT);
|
||||
}
|
||||
|
||||
#ifndef SKIP_KERNEL_IPSEC_MODPROBES
|
||||
/* determine if we have a native netkey IPsec stack */
|
||||
if (!starter_netkey_init())
|
||||
{
|
||||
DBG1(DBG_APP, "no netkey IPsec stack detected");
|
||||
if (!starter_klips_init())
|
||||
{
|
||||
DBG1(DBG_APP, "no KLIPS IPsec stack detected");
|
||||
DBG1(DBG_APP, "no known IPsec stack detected, ignoring!");
|
||||
}
|
||||
}
|
||||
#endif
|
||||
|
||||
last_reload = time_monotonic(NULL);
|
||||
|
||||
if (check_pid(starter_pid_file))
|
||||
|
||||
Reference in New Issue
Block a user