aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJohn Baldwin <jhb@FreeBSD.org>2020-05-14 19:29:08 +0000
committerJohn Baldwin <jhb@FreeBSD.org>2020-05-14 19:29:08 +0000
commited7d82c44d00dd9d5b148e1ad9f903fd9ec7636a (patch)
treee3d34ae864e23028e8c7f9e030f3c134203d7285
parentf89903d63f71890746a348bb546b5dbc4dba623e (diff)
downloadsrc-ed7d82c44d00dd9d5b148e1ad9f903fd9ec7636a.tar.gz
src-ed7d82c44d00dd9d5b148e1ad9f903fd9ec7636a.zip
MF11 361044,361048: Deprecate ubsec(4) for FreeBSD 13.0.
With the removal of in-tree consumers of DES, Triple DES, and MD5-HMAC, the only algorithm this driver still supports is SHA1-HMAC. This is not very useful as a standalone algorithm (IPsec AH-only with SHA1 would be the only user). This driver has also not been kept up to date with the original driver in OpenBSD which supports a few more cards and AES-CBC on newer cards. The newest card currently supported by this driver was released in 2005. Approved by: re (gjb) Relnotes: yes
Notes
Notes: svn path=/releng/11.4/; revision=361049
-rw-r--r--share/man/man4/ubsec.411
-rw-r--r--sys/dev/ubsec/ubsec.c1
2 files changed, 11 insertions, 1 deletions
diff --git a/share/man/man4/ubsec.4 b/share/man/man4/ubsec.4
index 4675da074026..5f21ccb472a3 100644
--- a/share/man/man4/ubsec.4
+++ b/share/man/man4/ubsec.4
@@ -26,7 +26,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd May 16, 2009
+.Dd May 14, 2020
.Dt UBSEC 4
.Os
.Sh NAME
@@ -48,6 +48,15 @@ module at boot time, place the following line in
.Bd -literal -offset indent
ubsec_load="YES"
.Ed
+.Sh DEPRECATION NOTICE
+The
+.Nm
+driver is not present in
+.Fx 13.0
+and later.
+The majority of crypto algorithms supported by this driver are no longer
+used by the kernel in
+.Fx 13.0 .
.Sh DESCRIPTION
The
.Nm
diff --git a/sys/dev/ubsec/ubsec.c b/sys/dev/ubsec/ubsec.c
index 53e3ef8d4e2e..f4c16de1ee05 100644
--- a/sys/dev/ubsec/ubsec.c
+++ b/sys/dev/ubsec/ubsec.c
@@ -474,6 +474,7 @@ skip_rng:
crypto_kregister(sc->sc_cid, CRK_MOD_EXP_CRT, 0);
#endif
}
+ gone_in_dev(dev, 13, "Does not support modern crypto algorithms");
return (0);
bad4:
crypto_unregister_all(sc->sc_cid);