In expand_ipsecspec(), if no algorithm is specified, continue on anyway. This allows a better diagnostic to be generated when a require algorithm is missing (rather than silently ignoring the protocol spec), and also supports optional algorithms (e.g. ESP+AH without ESP authentication).
In expand_ipsecspec(), if no algorithm is specified, continue on anyway.
This allows a better diagnostic to be generated when a require algorithm is
missing (rather than silently ignoring the protocol spec), and also supports
optional algorithms (e.g. ESP+AH without ESP authentication).

(from mycroft@netbsd.org - does it sound right?)

MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame