diff options
Diffstat (limited to 'sys')
| -rw-r--r-- | sys/netinet/ip_ipsec.c | 4 | ||||
| -rw-r--r-- | sys/netinet/tcp_subr.c | 3 | ||||
| -rw-r--r-- | sys/netipsec/ipsec.c | 6 |
3 files changed, 1 insertions, 12 deletions
diff --git a/sys/netinet/ip_ipsec.c b/sys/netinet/ip_ipsec.c index 7a7be7d..6fc8e80 100644 --- a/sys/netinet/ip_ipsec.c +++ b/sys/netinet/ip_ipsec.c @@ -157,10 +157,6 @@ int ip_ipsec_output(struct mbuf **m, struct inpcb *inp, int *error) { struct secpolicy *sp; - - if (!key_havesp(IPSEC_DIR_INBOUND)) - return 0; - /* * Check the security policy (SP) for the packet and, if * required, do IPsec-related processing. There are two diff --git a/sys/netinet/tcp_subr.c b/sys/netinet/tcp_subr.c index 6488ed9..ba2d834 100644 --- a/sys/netinet/tcp_subr.c +++ b/sys/netinet/tcp_subr.c @@ -1947,8 +1947,7 @@ ipsec_hdrsiz_tcp(struct tcpcb *tp) #endif struct tcphdr *th; - if ((tp == NULL) || ((inp = tp->t_inpcb) == NULL) || - (!key_havesp(IPSEC_DIR_OUTBOUND))) + if ((tp == NULL) || ((inp = tp->t_inpcb) == NULL)) return (0); m = m_gethdr(M_NOWAIT, MT_DATA); if (!m) diff --git a/sys/netipsec/ipsec.c b/sys/netipsec/ipsec.c index bf02f93..f01f0fe 100644 --- a/sys/netipsec/ipsec.c +++ b/sys/netipsec/ipsec.c @@ -1275,9 +1275,6 @@ ipsec46_in_reject(struct mbuf *m, struct inpcb *inp) int error; int result; - if (!key_havesp(IPSEC_DIR_INBOUND)) - return 0; - IPSEC_ASSERT(m != NULL, ("null mbuf")); /* Get SP for this packet. */ @@ -1405,9 +1402,6 @@ ipsec_hdrsiz(struct mbuf *m, u_int dir, struct inpcb *inp) int error; size_t size; - if (!key_havesp(dir)) - return 0; - IPSEC_ASSERT(m != NULL, ("null mbuf")); /* Get SP for this packet. */ |
