summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2.c
AgeCommit message (Expand)Author
2018-02-19Remove almost unused `flags' argument of suser().Martin Pieuchot
2017-11-20Flush flows using the radix-tree instead of a global list.Martin Pieuchot
2017-11-13Grab the KERNEL_LOCK() to iterate on the global list of PF_KEY sockets.Martin Pieuchot
2017-11-12Only use a single taskq to process incoming network packets as soon asMartin Pieuchot
2017-11-03After inlining of raw_detach we know the sizes for free; pointed outFlorian Obser
2017-11-03Inline trivial functions from raw_cb.c and tedu it.Florian Obser
2017-11-02Move PRU_DETACH out of pr_usrreq into per proto pr_detachFlorian Obser
2017-10-27Dump IPsec flows by iterating over the rafdix-tree.Martin Pieuchot
2017-10-16Last changes before running IPsec w/o KERNEL_LOCK().Martin Pieuchot
2017-10-09Reduces the scope of the NET_LOCK() in sysctl(2) path.Martin Pieuchot
2017-09-08If you use sys/param.h, you don't need sys/types.hTheo de Raadt
2017-08-11Remove NET_LOCK()'s argument.Martin Pieuchot
2017-07-26Consistantly use kp as the var name for struct keycb.Claudio Jeker
2017-07-03Both PF_ROUTE and PF_KEY need to start to take care of their own PCB listClaudio Jeker
2017-06-26Assert that the corresponding socket is locked when manipulating socketMartin Pieuchot
2017-06-26Allow updating the destination address of an existing TDB. Since thePatrick Wildt
2017-05-29Replace handrolled list with LIST_* macros. OK mpi@Claudio Jeker
2017-05-29Kill struct pfkey_version and move struct pfkeyv2_socket & dump_stateClaudio Jeker
2017-05-29PFKEY version 2 is the only pfkey version supported. No need for extraClaudio Jeker
2017-05-27Push the NET_LOCK down into PF_KEY so that it can be treated like PF_ROUTE.Claudio Jeker
2017-05-26There is only one version of pfkey in OpenBSD and this will not change anyClaudio Jeker
2017-05-16Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED().Martin Pieuchot
2017-05-05Expand SA_LEN(), there is no benefit for using the macro in theAlexander Bluhm
2017-02-28Depending on the addresses, ipsecctl(8) automatically groups saAlexander Bluhm
2017-02-24Avoid some casts by using the sa field of union sockaddr_union.Alexander Bluhm
2017-02-14Replace two recursive splsoftnet()/splx() dances with a splsoftassert().Martin Pieuchot
2017-01-24A space here, a space there. Soon we're talking real whitespaceKenneth R Westerback
2017-01-13Remove recursive splsoftnet() but use splsoftassert() instead.Martin Pieuchot
2016-09-15all pools have their ipl set via pool_setipl, so fold it into pool_init.David Gwynne
2016-08-30pool_setiplDavid Gwynne
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-07-17manage spd entries by using the radix api directly instead ofBret Lambert
2015-05-23introduce ipsec-id bundles and use them for ipsecflowinfo,Markus Friedl
2015-04-16remove unfinished/unused support for socket-attached ipsec-policiesMarkus Friedl
2015-04-16change {import,export}_identity so it can be used for policies; ok mikebMarkus Friedl
2015-04-14Remove support for storing credentials and auth information in the kernel.Mike Belopuhov
2015-04-13Now that if_input() set the receiving interface pointer on mbufs for usMartin Pieuchot
2015-03-26Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone?Mike Belopuhov
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-11-25The proliferation of "struct route" in all its flavors didn't makeMartin Pieuchot
2014-11-01Rename rtalloc1() into rtalloc(9) and convert its flags to only enableMartin Pieuchot
2014-10-14Use rtfree() instead of RTFREE(), NULLify some free'd route pointers andMartin Pieuchot
2014-09-27Kill rtalloc() and update rtalloc1() and rtalloc_mpath() to no longerMartin Pieuchot
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
2014-01-08Perform manual malloc/free of a large object in pfkeyv2_send() toTheo de Raadt
2013-08-21get rid of the copy argument in m_devget that let you provide anDavid Gwynne
2013-03-09re-arrange the pre-accounting of the objects in the buffer so itTheo de Raadt
2013-02-26Reserve space for source and destination addresses unconditionally ratherStuart Henderson
2012-12-28change the malloc(9) flags from M_DONTWAIT to M_NOWAIT; OK millert@Gleydson Soares
2012-09-26add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys)Markus Friedl