Age | Commit message (Expand) | Author |
2005-06-01 | when dumping policies, skip those attached to a socket. | Hans-Joerg Hoexer |
2005-05-28 | Only protect IDs by suser() | Hans-Joerg Hoexer |
2005-05-27 | Must convert back from IPPROTO_x to SADB_SATYPE_x. hshoexer@ ok | Hakan Olsson |
2005-05-27 | Use export_flow() to wrap policies retrieved via sysctl in pfkey message | Hans-Joerg Hoexer |
2005-05-25 | AESCTR support for ESP (RFC 3686); ok hshoexer | Markus Friedl |
2005-05-24 | Make sure all fields in the SADB_DUMP header are zeroed properly. hshoexer@ ok. | Hakan Olsson |
2005-05-10 | support NULL encryption for ESP; ok hshoexer, ho | Markus Friedl |
2005-04-04 | Add sysctl for dumping the SPD | Hans-Joerg Hoexer |
2005-01-13 | protect pfkeyv2_dump_walker with spltdb(). Noticed by mpech@, thanks! | Hans-Joerg Hoexer |
2004-12-11 | SADB_X_EXT_LIFETIME_LASTUSE is always defined | Markus Friedl |
2004-12-11 | pass out the correct lifetime type on expire | Markus Friedl |
2004-12-11 | count SADB_REGISTER only once per socket | Markus Friedl |
2004-12-10 | fix ipsec crash from pr 4025, Stefan Miltchev; ok hshoexer@ | Markus Friedl |
2004-11-29 | tiny knf, no binary change. | Hans-Joerg Hoexer |
2004-11-26 | implement net.key.v2.sadb_dump.{unspec,esp,ah,...} sysctl subtree | Markus Friedl |
2004-11-19 | Plug memory leak. Found by pat@. Thanks! | Hans-Joerg Hoexer |
2004-08-10 | Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding this | Hakan Olsson |
2004-06-21 | don't accept SADB_X_EXT_UDPENCAP if encapsulation is disabled; ok ho@ | Markus Friedl |
2003-12-02 | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | Markus Friedl |
2003-07-24 | conform to RFC2367 on SADB_xx naming (local name must be prefixed with | Jun-ichiro itojun Hagino |
2003-07-24 | hmac-sha2-{256,384,512} support in AH/ESP auth. markus ok | Jun-ichiro itojun Hagino |
2003-02-16 | KNF | Theo de Raadt |
2003-02-16 | KNF | Jason Wright |
2003-02-15 | skeleton support for LZS compression | Jason Wright |
2002-07-31 | fix potential NULL pointer deref. From: tedu <grendel@zeitbombe.org> | Jun-ichiro itojun Hagino |
2002-06-07 | Add flow type arg to import_flow() | Hakan Olsson |
2002-05-31 | Pass authentication information (if available) in ACQUIRE message. | Angelos D. Keromytis |
2002-03-03 | Fix crashes associated with SADB_GET/SADB_DUMP --- memory was not | Angelos D. Keromytis |
2002-02-21 | Correctly initialize the compression case. | Angelos D. Keromytis |
2002-01-23 | It looks like there has been one crack smoking and a few cut and pastes. | Artur Grabowski |
2002-01-23 | Pool deals fairly well with physical memory shortage, but it doesn't deal | Artur Grabowski |
2001-08-05 | Actually, move the check inside the switch. | Angelos D. Keromytis |
2001-08-05 | Only flush the policies if the message type is UNSPEC. | Angelos D. Keromytis |
2001-07-06 | Indentation. | Hakan Olsson |
2001-07-05 | IPComp. angelos@ ok. | Jean-Jacques Bernard-Gundol |
2001-06-27 | Don't bzero() after doing a TAILQ_INIT()... | Angelos D. Keromytis |
2001-06-27 | Initialize acquire state list in newly allocated policy. | Angelos D. Keromytis |
2001-06-27 | Don't cache packets that hit policies -- we'll do that at the PCB for | Angelos D. Keromytis |
2001-06-26 | Use pool(9) for IPsec policy structures. | Angelos D. Keromytis |
2001-06-26 | Keep the PFKEY sequence number at the TDB, plus a little bit of KNF | Angelos D. Keromytis |
2001-06-08 | Only delete/modify flows with the IPSP_POLICY_STATIC flag if the appropriate | Angelos D. Keromytis |
2001-06-08 | Trim some unnecessary includes. | Angelos D. Keromytis |
2001-06-08 | Fork out some of the code in pfkeyv2.c to pfkeyv2_convert.c, to make | Angelos D. Keromytis |
2001-06-07 | On a pfkeyv2_get(), allocate enough room for the extra stuff we store | Angelos D. Keromytis |
2001-06-05 | repair copyright notices for NRL & cmetz; cmetz | Theo de Raadt |
2001-06-05 | Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwards | Niklas Hallqvist |
2001-05-30 | MBOX->USERFQDN, noticed by markus@ | Angelos D. Keromytis |
2001-05-30 | Import/export authentication information for SA. | Angelos D. Keromytis |
2001-05-21 | Use a reference-counted structure for IPsec IDs and credentials, so we | Angelos D. Keromytis |
2001-05-05 | Use the new M_* malloc types | Angelos D. Keromytis |