Project

General

Profile

Feature #3176

Split ipsec_util.h

Added by Igor Pashev about 8 years ago. Updated over 6 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Start date:
2012-09-11
Due date:
% Done:

0%

Estimated time:
Difficulty:
Medium
Tags:
needs-triage
Gerrit CR:

Description

ipsec_util.h and libipsecutil are terrible things :-)
ipsec_util.h includes libtecla.h, and libipsecutil dlopen()s openssl libraries.

libnsl needs ipsec_util.h to build, but it uses only a few common definitions from it:
INET_IPSECALGSPATH,
INET_IPSECALGSFILE,
LIBIPSEC_ALGS_LINE_*,
LIBIPSEC_ALGS_KEY_*,
ipsecalgs_pkg_t,
ipsecalgs_exec_mode_t,
ipsec_proto_t.

I could be convenient to move those definitions into a separate header, say ipsec_def.h,
to make sources not so tightly coupled.

History

#1

Updated by Dan McDonald over 6 years ago

Hmmm, according to ldd, libnsl doesn't link in libtecla or openssl:

osdev3(~)[1]% ldd /lib/libnsl.so.1 
        libmp.so.2 =>    /lib/libmp.so.2
        libmd.so.1 =>    /lib/libmd.so.1
        libc.so.1 =>     /lib/libc.so.1
        libm.so.2 =>     /lib/libm.so.2
osdev3(~)[0]% 

Does use of libnsl cause a dlopen() of libcrypto from openssl? A reproducible test case would be nice here.

Also available in: Atom PDF