summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2.c
AgeCommit message (Expand)Author
2013-08-21get rid of the copy argument in m_devget that let you provide anDavid Gwynne
2013-03-09re-arrange the pre-accounting of the objects in the buffer so itTheo de Raadt
2013-02-26Reserve space for source and destination addresses unconditionally ratherStuart Henderson
2012-12-28change the malloc(9) flags from M_DONTWAIT to M_NOWAIT; OK millert@Gleydson Soares
2012-09-26add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys)Markus Friedl
2012-09-20spltdb() was really just #define'd to be splsoftnet(); replace the formerBret Lambert
2012-03-28pfkey needs some p_p->ps_pid too. OK deraadt@ guenther@Claudio Jeker
2011-01-12Never include SADB_X_EXT_REMOTE_AUTH (which is either aMike Belopuhov
2010-10-06Retire SkipjackMike Belopuhov
2010-09-27a pool_get() assuming that PR_NOWAIT is 0 (not anymore!); run into by naddyTheo de Raadt
2010-07-09Add support for using IPsec in multiple rdomains.Reyk Floeter
2010-07-01Allow to specify an alternative enc(4) interface for an SA. AllReyk Floeter
2008-05-09replace rtrequest() with corresponding rtrequest1() replacement.Claudio Jeker
2007-11-24some spelling fixes from Martynas VenckusJason McIntyre
2007-09-13Convert MALLOC/FREE to malloc/free and use M_ZERO where applicable.Hans-Joerg Hoexer
2007-09-01since theHenning Brauer
2007-06-22export the flow/filter information attached to the SA, too; ok hshoexer@Markus Friedl
2007-02-14Consistently spell FALLTHROUGH to appease lint.Jonathan Gray
2007-01-18allow kernels with TCP_SIGNATURE (aka tcp md5sig), but without IPSEC toHenning Brauer
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2006-06-16adjust functions dealing with the routing table to take a table ID asHenning Brauer
2006-05-06Fix bracketing messed up in KNF commit 1.86, allows sasyncd to reliablyRyan Thomas McBride
2005-12-06export ipip flows, too; ok hshoexerMarkus Friedl
2005-06-01when dumping policies, skip those attached to a socket.Hans-Joerg Hoexer
2005-05-28Only protect IDs by suser()Hans-Joerg Hoexer
2005-05-27Must convert back from IPPROTO_x to SADB_SATYPE_x. hshoexer@ okHakan Olsson
2005-05-27Use export_flow() to wrap policies retrieved via sysctl in pfkey messageHans-Joerg Hoexer
2005-05-25AESCTR support for ESP (RFC 3686); ok hshoexerMarkus Friedl
2005-05-24Make sure all fields in the SADB_DUMP header are zeroed properly. hshoexer@ ok.Hakan Olsson
2005-05-10support NULL encryption for ESP; ok hshoexer, hoMarkus Friedl
2005-04-04Add sysctl for dumping the SPDHans-Joerg Hoexer
2005-01-13protect pfkeyv2_dump_walker with spltdb(). Noticed by mpech@, thanks!Hans-Joerg Hoexer
2004-12-11SADB_X_EXT_LIFETIME_LASTUSE is always definedMarkus Friedl
2004-12-11pass out the correct lifetime type on expireMarkus Friedl
2004-12-11count SADB_REGISTER only once per socketMarkus Friedl
2004-12-10fix ipsec crash from pr 4025, Stefan Miltchev; ok hshoexer@Markus Friedl
2004-11-29tiny knf, no binary change.Hans-Joerg Hoexer
2004-11-26implement net.key.v2.sadb_dump.{unspec,esp,ah,...} sysctl subtreeMarkus Friedl
2004-11-19Plug memory leak. Found by pat@. Thanks!Hans-Joerg Hoexer
2004-08-10Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding thisHakan Olsson
2004-06-21don't accept SADB_X_EXT_UDPENCAP if encapsulation is disabled; ok ho@Markus Friedl
2003-12-02UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)Markus Friedl
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-07-24hmac-sha2-{256,384,512} support in AH/ESP auth. markus okJun-ichiro itojun Hagino
2003-02-16KNFTheo de Raadt
2003-02-16KNFJason Wright
2003-02-15skeleton support for LZS compressionJason Wright
2002-07-31fix potential NULL pointer deref. From: tedu <grendel@zeitbombe.org>Jun-ichiro itojun Hagino
2002-06-07Add flow type arg to import_flow()Hakan Olsson
2002-05-31Pass authentication information (if available) in ACQUIRE message.Angelos D. Keromytis