| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2000-03-17 | Cryptographic services framework, and software "device driver". The | Angelos D. Keromytis | |
| idea is to support various cryptographic hardware accelerators (which may be (detachable) cards, secondary/tertiary/etc processors, software crypto, etc). Supports session migration between crypto devices. What it doesn't (yet) support: - multiple instances of the same algorithm used in the same session - use of multiple crypto drivers in the same session - asymmetric crypto No support for a userland device yet. IPsec code path modified to allow for asynchronous cryptography (callbacks used in both input and output processing). Some unrelated code simplification done in the process (especially for AH). Development of this code kindly supported by Network Security Technologies (NSTI). The code was writen mostly in Greece, and is being committed from Montreal. | |||
| 2000-02-07 | fix include file path related to ip6. | Jun-ichiro itojun Hagino | |
| 2000-01-25 | Ok, so setsoftnet is md. | Marc Espie | |
| Well, on the amiga, setsoftnet *REQUIRES* machine/cpu.h to work... and no include mentioned in those files pulls machine/cpu.h... Nit-fix: / * INET6 */ -> /* INET6 */ | |||
| 2000-01-15 | Can't bind SAs to enc0 | Angelos D. Keromytis | |
| 2000-01-07 | Add missing IF_DROPs | Angelos D. Keromytis | |
| 2000-01-02 | Properly handle non-IPSEC case. | Angelos D. Keromytis | |
| 1999-12-27 | Add SRCSA and CLEARSA ioctls. | Angelos D. Keromytis | |
| 1999-12-27 | Implement ioctls for binding SAs to enc interfaces (to be used with | Angelos D. Keromytis | |
| the bridge). | |||
| 1999-11-02 | Fix *stupid* typo/error that was causing the panics in post 2.6, found | Angelos D. Keromytis | |
| by art@ | |||
| 1999-10-29 | Use enc_softc instead of ifnet for encif. | Angelos D. Keromytis | |
| 1999-07-05 | remove bogus entry from if_enc address list; and rename enc_softc to encif | Theo de Raadt | |
| 1999-05-16 | The enc interface should not be IFF_LOOPBACK, as AH and ESP uses that | Niklas Hallqvist | |
| as receiving interface for filtering | |||
| 1998-06-28 | indent | Theo de Raadt | |
| 1998-06-10 | make the packets which were successfully processed by IPSec available to | Niels Provos | |
| bpf via the enc0 interface, using linktype DLT_ENC. | |||
| 1998-05-18 | first step to the setsockopt/getsockopt interface as described in | Niels Provos | |
| draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal userland key management applications when security services are requested. this is only for outgoing connections at the moment, incoming packets are not yet checked against the selected socket policy. | |||
| 1997-11-04 | make it easier to add additional transforms. add blowfish and cast | Niels Provos | |
| encryption. some more info for kernfs/ipsec. | |||
| 1997-07-11 | put old esp/ah and new esp/ah in different files. | Niels Provos | |
| generalised way of handling transforms. | |||
| 1997-07-01 | major restructuring | Niels Provos | |
| 1997-02-27 | BPF support ifdefed. | Angelos D. Keromytis | |
| 1997-02-24 | OpenBSD tags + some prototyping police | Niklas Hallqvist | |
| 1997-02-20 | IPSEC package by John Ioannidis and Angelos D. Keromytis. Written in | Theo de Raadt | |
| Greece. From ftp.funet.fi:/pub/unix/security/net/ip/BSDipsec.tar.gz | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |