summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2.c
AgeCommit message (Collapse)Author
1999-05-23Avoid bzero + free after failed malloc(). From niklas@Hakan Olsson
1999-05-16spltdb introduced, protection for tdb lists and related structures, soNiklas Hallqvist
they won't disappear behind our back by an expiration. Cleanup expiration logic too.
1999-05-14A new scalable IPsec SA expiration model.Niklas Hallqvist
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too.
1999-04-09when the REPLACE flag was used, but no former flows was there, we did notNiklas Hallqvist
increment the IPSEC use counter, potentially missing IPSEC processing on output.
1999-03-31Implement SADB_SAFLAGS_X_REPLACEFLOWNiklas Hallqvist
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
1999-03-24Implement lifetime expiration notifications. Fix some typos. Remove statics.Niklas Hallqvist
1999-03-05update allocation statisticsTheo de Raadt
1999-03-04remove unnecessary malloc checks when using WAITOKTheo de Raadt
1999-03-04clear key headers earlierTheo de Raadt
1999-03-04more paranoid maintenanceTheo de Raadt
1999-03-02keep track of SATYPE registrations per PFKEY socketTheo de Raadt
1999-03-02ESRCH, not EEXIST; markus.friedl@informatik.uni-erlangen.deTheo de Raadt
1999-02-25Possible cause of responses not going back to userland.Angelos D. Keromytis
1999-02-25Removed osdep.h dependencies.Angelos D. Keromytis
1999-02-24PF_KEY_V2, with local extensions for SPD management.Angelos D. Keromytis