summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2.c
AgeCommit message (Expand)Author
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
2001-06-26Use pool(9) for IPsec policy structures.Angelos D. Keromytis
2001-06-26Keep the PFKEY sequence number at the TDB, plus a little bit of KNFAngelos D. Keromytis
2001-06-08Only delete/modify flows with the IPSP_POLICY_STATIC flag if the appropriateAngelos D. Keromytis
2001-06-08Trim some unnecessary includes.Angelos D. Keromytis
2001-06-08Fork out some of the code in pfkeyv2.c to pfkeyv2_convert.c, to makeAngelos D. Keromytis
2001-06-07On a pfkeyv2_get(), allocate enough room for the extra stuff we storeAngelos D. Keromytis
2001-06-05repair copyright notices for NRL & cmetz; cmetzTheo de Raadt
2001-06-05Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwardsNiklas Hallqvist
2001-05-30MBOX->USERFQDN, noticed by markus@Angelos D. Keromytis
2001-05-30Import/export authentication information for SA.Angelos D. Keromytis
2001-05-21Use a reference-counted structure for IPsec IDs and credentials, so weAngelos D. Keromytis
2001-05-05Use the new M_* malloc typesAngelos D. Keromytis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-27Fix a problem with how TDB timeouts were used in pfkeyv2.Artur Grabowski
2001-03-15convert SA expirations to the new timeouts.Michael Shalayeff
2001-03-04Import/export credentials from TDB.Angelos D. Keromytis
2000-12-24Set sequence number to zero for last message in SADB_DUMP, close pr 1583.Angelos D. Keromytis
2000-12-15send messages to all registered listeners. makes multiple keying daemonsNiels Provos
2000-12-14sync with pfkey rfc. you need to rebuild ipsecadm and isakmpd after this.Niels Provos
2000-11-17Missed this, from the previous commit.Angelos D. Keromytis
2000-11-17*HMAC96->*HMACAngelos D. Keromytis
2000-11-06Send the message to registered promiscuous listeners.Angelos D. Keromytis
2000-10-14ASKPOLICY message; used by key management to inquire about policyAngelos D. Keromytis
2000-10-09AES.Angelos D. Keromytis
2000-10-09Properly cleanup IDs when resetting policy.Angelos D. Keromytis
2000-09-29Don't use an SA payload for ADDFLOW/DELFLOW.Angelos D. Keromytis
2000-09-21Correctly handle srcid/dstid.Angelos D. Keromytis
2000-09-20Add IDENTITY payloads to flow establishment (and cleanup accordingly)Angelos D. Keromytis
2000-09-19SA bundles.Angelos D. Keromytis
2000-09-19Still more careful with cleaning up.Angelos D. Keromytis
2000-09-19Better cleanup on invalid ADDFLOW message.Angelos D. Keromytis
2000-09-19SPD-driven IPsec.Angelos D. Keromytis
2000-08-24Fix a problem when deleting a flow via -delete. This only affects flowsFederico G. Schwindt
2000-08-08Big oops -- lucky us BLF and CAST are not used by anyone else (on theAngelos D. Keromytis
2000-03-26Add RCS ID.Angelos D. Keromytis
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
2000-01-13Ingress flow support.Angelos D. Keromytis
2000-01-12Major style cleanup for pfkeyv2.cAngelos D. Keromytis
2000-01-10Remove unnecessary function prototype.Angelos D. Keromytis
2000-01-09Use rt_maskedcopy() instead of handling netmasks manually.Angelos D. Keromytis
2000-01-09Proper netmask handling.Angelos D. Keromytis
1999-12-04IPv6 address support, get rid of the LOCALFLOW flagAngelos D. Keromytis
1999-11-04Bypass flows can be flushed.Hakan Olsson
1999-08-14Typo fix.Hakan Olsson
1999-08-10Support SADB_DUMP. Misc code cleanup. angelos@ ok.Hakan Olsson
1999-08-05Add SADB_FLUSH logic (tdb flushing).Hakan Olsson
1999-07-15From angelos@, edits by me, demand keying for PF_KEYNiklas Hallqvist
1999-07-06ipsec_in_use could get out of sync. (Also niklas@. angelos@ ok)Hakan Olsson