summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2_convert.c
AgeCommit message (Expand)Author
2020-07-18Add size to free(9) callskn
2020-04-23Add support for autmatically moving traffic between rdomains on ipsec(4)tobhe
2019-03-04Add padding to struct sadb_x_counter to make it comply withStefan Sperling
2019-01-13Fix an off-by-one in pfkeyv2_sysctl_policydumper() and get rid of aMartin Pieuchot
2018-08-28Add per-TDB counters and a new SADB extension to export them toMartin Pieuchot
2018-01-11Advance data pointer after exporting SA type to userland. OtherwiseAlexander Bluhm
2017-09-08If you use sys/param.h, you don't need sys/types.hTheo de Raadt
2017-06-06Fix build without PF.Martin Pieuchot
2017-05-05Expand SA_LEN(), there is no benefit for using the macro in theAlexander Bluhm
2017-02-28Depending on the addresses, ipsecctl(8) automatically groups saAlexander Bluhm
2017-01-24A space here, a space there. Soon we're talking real whitespaceKenneth R Westerback
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-11-03Plumb Chacha20-Poly1305 into the IPsec/ESP and PF_KEY frameworksMike Belopuhov
2015-09-11in6_embedscope() needs to lose some weight. Remove the last argument.Claudio Jeker
2015-06-11Move away from using hzto(9); OK dlgMike Belopuhov
2015-05-25fix panic for real and revert previous rev 1.52Sebastian Benoit
2015-05-25fix a panic in import_identities() in case the ID isnt loadedSebastian Benoit
2015-05-23introduce ipsec-id bundles and use them for ipsecflowinfo,Markus Friedl
2015-04-17Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexerMike Belopuhov
2015-04-16change {import,export}_identity so it can be used for policies; ok mikebMarkus Friedl
2015-04-14Remove support for storing credentials and auth information in the kernel.Mike Belopuhov
2015-02-06style(9) nitBret Lambert
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-28remove KPDK. not really used, and a bad choice anyway. ok naddyTed Unangst
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
2013-10-24Remove the number of in6_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-12give tagname2tag and its siblings an extra "create" parameter. if 1, itHenning Brauer
2013-06-05Unbreak the kernel to userspace SADB_X_EXT_TAG message.Reyk Floeter
2013-03-28code that calls timeout functions should include timeout.hTed Unangst
2013-03-09re-arrange the pre-accounting of the objects in the buffer so itTheo de Raadt
2012-09-18remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not setMarkus Friedl
2012-06-29Add support for the Extended (64-bit) Sequence Number as definedMike Belopuhov
2011-04-13export udpencap state of SA to userland; unbreaks sasyncd(8) with NAT/T.Markus Friedl
2010-10-06Retire SkipjackMike Belopuhov
2010-09-22Add AES-GCM Transform Identifiers as specified by IANA inMike Belopuhov
2010-07-01Allow to specify an alternative enc(4) interface for an SA. AllReyk Floeter
2008-10-22#if INET => #ifdef INETMarco Pfatschbacher
2007-09-13Convert MALLOC/FREE to malloc/free and use M_ZERO where applicable.Hans-Joerg Hoexer
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2006-06-01observed by Naddy, found by claudio, strange constructs require strange definesTodd T. Fries
2006-05-30with Naddy prodding, claudio's peril sensitive glasses turning black, andTodd T. Fries
2005-05-27Convert IPSP_IPSEC_x to SADB_X_FLOW_TYPE_x. hshoexer@ ok.Hakan Olsson
2005-05-27Add export_flow()Hans-Joerg Hoexer
2005-05-25AESCTR support for ESP (RFC 3686); ok hshoexerMarkus Friedl
2005-05-24Better SA state reporting. markus@, hshoexer@ ok.Hakan Olsson
2005-05-10support NULL encryption for ESP; ok hshoexer, hoMarkus Friedl
2004-08-10Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding thisHakan Olsson
2004-06-24This moves access to wall and uptime variables in MI code,Thorsten Lockert
2004-06-21make it possble to use IPsec over link-local address (policy table usesJun-ichiro itojun Hagino