HomeFreeBSD

Make the warning intervals for deprecated crypto algorithms tunable.

Description

Make the warning intervals for deprecated crypto algorithms tunable.

New sysctl/tunables can now set the interval (in seconds) between
rate-limited crypto warnings. The new sysctls are:

  • kern.cryptodev_warn_interval for /dev/crypto
  • net.inet.ipsec.crypto_warn_interval for IPsec
  • kern.kgssapi_warn_interval for KGSSAPI

Reviewed by: cem
MFC after: 1 month
Relnotes: yes
Sponsored by: Chelsio Communications
Differential Revision: https://reviews.freebsd.org/D20555

Details

Provenance
jhbAuthored on
Reviewer
cem
Differential Revision
D20555: Make the warning intervals for deprecated crypto algorithms tunable.
Parents
rS348969: Document sysctl nodes that translate their values.
Branches
Unknown
Tags
Unknown