| Age | Commit message (Expand) | Author |
|---|
| 2017-11-20 | Flush flows using the radix-tree instead of a global list. | Martin Pieuchot |
| 2017-11-13 | Grab the KERNEL_LOCK() to iterate on the global list of PF_KEY sockets. | Martin Pieuchot |
| 2017-11-12 | Only use a single taskq to process incoming network packets as soon as | Martin Pieuchot |
| 2017-11-03 | After inlining of raw_detach we know the sizes for free; pointed out | Florian Obser |
| 2017-11-03 | Inline trivial functions from raw_cb.c and tedu it. | Florian Obser |
| 2017-11-02 | Move PRU_DETACH out of pr_usrreq into per proto pr_detach | Florian Obser |
| 2017-10-27 | Dump IPsec flows by iterating over the rafdix-tree. | Martin Pieuchot |
| 2017-10-16 | Last changes before running IPsec w/o KERNEL_LOCK(). | Martin Pieuchot |
| 2017-10-09 | Reduces the scope of the NET_LOCK() in sysctl(2) path. | Martin Pieuchot |
| 2017-09-08 | If you use sys/param.h, you don't need sys/types.h | Theo de Raadt |
| 2017-08-11 | Remove NET_LOCK()'s argument. | Martin Pieuchot |
| 2017-07-26 | Consistantly use kp as the var name for struct keycb. | Claudio Jeker |
| 2017-07-03 | Both PF_ROUTE and PF_KEY need to start to take care of their own PCB list | Claudio Jeker |
| 2017-06-26 | Assert that the corresponding socket is locked when manipulating socket | Martin Pieuchot |
| 2017-06-26 | Allow updating the destination address of an existing TDB. Since the | Patrick Wildt |
| 2017-05-29 | Replace handrolled list with LIST_* macros. OK mpi@ | Claudio Jeker |
| 2017-05-29 | Kill struct pfkey_version and move struct pfkeyv2_socket & dump_state | Claudio Jeker |
| 2017-05-29 | PFKEY version 2 is the only pfkey version supported. No need for extra | Claudio Jeker |
| 2017-05-27 | Push the NET_LOCK down into PF_KEY so that it can be treated like PF_ROUTE. | Claudio Jeker |
| 2017-05-26 | There is only one version of pfkey in OpenBSD and this will not change any | Claudio Jeker |
| 2017-05-16 | Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED(). | Martin Pieuchot |
| 2017-05-05 | Expand SA_LEN(), there is no benefit for using the macro in the | Alexander Bluhm |
| 2017-02-28 | Depending on the addresses, ipsecctl(8) automatically groups sa | Alexander Bluhm |
| 2017-02-24 | Avoid some casts by using the sa field of union sockaddr_union. | Alexander Bluhm |
| 2017-02-14 | Replace two recursive splsoftnet()/splx() dances with a splsoftassert(). | Martin Pieuchot |
| 2017-01-24 | A space here, a space there. Soon we're talking real whitespace | Kenneth R Westerback |
| 2017-01-13 | Remove recursive splsoftnet() but use splsoftassert() instead. | Martin Pieuchot |
| 2016-09-15 | all pools have their ipl set via pool_setipl, so fold it into pool_init. | David Gwynne |
| 2016-08-30 | pool_setipl | David Gwynne |
| 2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
| 2015-07-17 | manage spd entries by using the radix api directly instead of | Bret Lambert |
| 2015-05-23 | introduce ipsec-id bundles and use them for ipsecflowinfo, | Markus Friedl |
| 2015-04-16 | remove unfinished/unused support for socket-attached ipsec-policies | Markus Friedl |
| 2015-04-16 | change {import,export}_identity so it can be used for policies; ok mikeb | Markus Friedl |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-04-13 | Now that if_input() set the receiving interface pointer on mbufs for us | Martin Pieuchot |
| 2015-03-26 | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | Mike Belopuhov |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-11-25 | The proliferation of "struct route" in all its flavors didn't make | Martin Pieuchot |
| 2014-11-01 | Rename rtalloc1() into rtalloc(9) and convert its flags to only enable | Martin Pieuchot |
| 2014-10-14 | Use rtfree() instead of RTFREE(), NULLify some free'd route pointers and | Martin Pieuchot |
| 2014-09-27 | Kill rtalloc() and update rtalloc1() and rtalloc_mpath() to no longer | Martin Pieuchot |
| 2014-07-12 | add a size argument to free. will be used soon, but for now default to 0. | Ted Unangst |
| 2014-01-08 | Perform manual malloc/free of a large object in pfkeyv2_send() to | Theo de Raadt |
| 2013-08-21 | get rid of the copy argument in m_devget that let you provide an | David Gwynne |
| 2013-03-09 | re-arrange the pre-accounting of the objects in the buffer so it | Theo de Raadt |
| 2013-02-26 | Reserve space for source and destination addresses unconditionally rather | Stuart Henderson |
| 2012-12-28 | change the malloc(9) flags from M_DONTWAIT to M_NOWAIT; OK millert@ | Gleydson Soares |
| 2012-09-26 | add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys) | Markus Friedl |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
