summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2.h
AgeCommit message (Expand)Author
2015-05-23introduce ipsec-id bundles and use them for ipsecflowinfo,Markus Friedl
2015-04-17Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexerMike Belopuhov
2015-04-16change {import,export}_identity so it can be used for policies; ok mikebMarkus Friedl
2015-04-14Remove support for storing credentials and auth information in the kernel.Mike Belopuhov
2014-12-28remove KPDK. not really used, and a bad choice anyway. ok naddyTed Unangst
2013-10-24Move more stuff under _KERNELTheo de Raadt
2013-03-09normalize structure definitionsTheo de Raadt
2012-09-18remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not setMarkus Friedl
2012-06-29Add support for the Extended (64-bit) Sequence Number as definedMike Belopuhov
2010-10-06Retire SkipjackMike Belopuhov
2010-09-22Add AES-GCM Transform Identifiers as specified by IANA inMike Belopuhov
2010-07-09Add support for using IPsec in multiple rdomains.Reyk Floeter
2010-07-01Allow to specify an alternative enc(4) interface for an SA. AllReyk Floeter
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2005-05-27Use export_flow() to wrap policies retrieved via sysctl in pfkey messageHans-Joerg Hoexer
2005-05-25AESCTR support for ESP (RFC 3686); ok hshoexerMarkus Friedl
2005-04-04Add sysctl for dumping the SPDHans-Joerg Hoexer
2004-11-26implement net.key.v2.sadb_dump.{unspec,esp,ah,...} sysctl subtreeMarkus Friedl
2004-08-10Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding thisHakan Olsson
2004-01-27don't convert tcpmd5 to ip-over-ip in SADB_X_GETSPROTO; from hshoexerMarkus Friedl
2003-12-02UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)Markus Friedl
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-02-24SADB_X_CALG_MAX is supposed to be the highest numbered supported algorithmJason Wright
2003-02-16KNFTheo de Raadt
2003-02-16KNFJason Wright
2003-02-15s/LSZ/LZS (consistent with linux and isakmpd *.cst)Jason Wright
2002-06-07Add flow type arg to import_flow()Hakan Olsson
2002-05-31import_flow() prototypeAngelos D. Keromytis
2001-12-18NRL license cleaningTheo de Raadt
2001-07-05$OpenBSD$ tagAngelos D. Keromytis
2001-07-05Include files for IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-09By popular demand, protect from multiple inclusion, and fix to use theAngelos D. Keromytis
2001-06-08Flag field for flows.Angelos D. Keromytis
2001-06-08Fork out some of the code in pfkeyv2.c to pfkeyv2_convert.c, to makeAngelos D. Keromytis
2001-06-05Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwardsNiklas Hallqvist
2001-05-30Add comments on what the credential types are.Angelos D. Keromytis
2001-05-30MBOX->USERFQDN, noticed by markus@Angelos D. Keromytis
2001-05-30Import/export authentication information for SA.Angelos D. Keromytis
2001-05-30Add AUTH payload.Angelos D. Keromytis
2001-05-05Use the new M_* malloc typesAngelos D. Keromytis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-04Import/export credentials from TDB.Angelos D. Keromytis
2000-12-14sync with pfkey rfc. you need to rebuild ipsecadm and isakmpd after this.Niels Provos
2000-11-18Update list of algorithms (hshoexer@rommelwood.de)Angelos D. Keromytis
2000-11-17*HMAC96->*HMACAngelos D. Keromytis
2000-11-11CAST128 should be 6 (again itojun@openbsd.org)Angelos D. Keromytis
2000-11-11AES should be 12 (from IANA) -- itojun@openbsd.orgAngelos D. Keromytis
2000-11-09Conform to RFC 2367 numbering (hshoexer@rommelwood.de)Angelos D. Keromytis
2000-10-14ASKPOLICY message; used by key management to inquire about policyAngelos D. Keromytis
2000-10-09AES number.Angelos D. Keromytis