svn commit: r361049 - in releng/11.4: share/man/man4 sys/dev/ubsec

[John Baldwin]

Author: jhb
Date: Thu May 14 19:29:08 2020
New Revision: 361049
URL: https://svnweb.freebsd.org/changeset/base/361049

Log:
  MF11 361044,361048: Deprecate ubsec(4) for FreeBSD 13.0.
  
  With the removal of in-tree consumers of DES, Triple DES, and
  MD5-HMAC, the only algorithm this driver still supports is SHA1-HMAC.
  This is not very useful as a standalone algorithm (IPsec AH-only with
  SHA1 would be the only user).
  
  This driver has also not been kept up to date with the original driver
  in OpenBSD which supports a few more cards and AES-CBC on newer cards.
  The newest card currently supported by this driver was released in
  2005.
  
  Approved by:	re (gjb)
  Relnotes:	yes

Modified:
  releng/11.4/share/man/man4/ubsec.4
  releng/11.4/sys/dev/ubsec/ubsec.c
Directory Properties:
  releng/11.4/   (props changed)

Modified: releng/11.4/share/man/man4/ubsec.4
==============================================================================
--- releng/11.4/share/man/man4/ubsec.4	Thu May 14 19:15:21 2020	(r361048)
+++ releng/11.4/share/man/man4/ubsec.4	Thu May 14 19:29:08 2020	(r361049)
@@ -26,7 +26,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd May 16, 2009
+.Dd May 14, 2020
 .Dt UBSEC 4
 .Os
 .Sh NAME
@@ -48,6 +48,15 @@ module at boot time, place the following line in
 .Bd -literal -offset indent
 ubsec_load="YES"
 .Ed
+.Sh DEPRECATION NOTICE
+The
+.Nm
+driver is not present in
+.Fx 13.0
+and later.
+The majority of crypto algorithms supported by this driver are no longer
+used by the kernel in
+.Fx 13.0 .
 .Sh DESCRIPTION
 The
 .Nm

Modified: releng/11.4/sys/dev/ubsec/ubsec.c
==============================================================================
--- releng/11.4/sys/dev/ubsec/ubsec.c	Thu May 14 19:15:21 2020	(r361048)
+++ releng/11.4/sys/dev/ubsec/ubsec.c	Thu May 14 19:29:08 2020	(r361049)
@@ -474,6 +474,7 @@ skip_rng:
 		crypto_kregister(sc->sc_cid, CRK_MOD_EXP_CRT, 0);
 #endif
 	}
+	gone_in_dev(dev, 13, "Does not support modern crypto algorithms");
 	return (0);
 bad4:
 	crypto_unregister_all(sc->sc_cid);