• Split tcp_signature_compute() into 2 pieces:
  • tcp_get_sav() - SADB key lookup
  • tcp_signature_do_compute() - actual computation
• Fix TCP signature case for listening socket: do not assume EVERY connection coming to socket with TCP_SIGNATURE set to be md5 signed regardless of SADB key existance for particular address. This fixes the case for routing software having _some_ BGP sessions secured by md5.
• Simplify TCP_SIGNATURE handling in tcp_input()

MFC after: 2 weeks