summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2_convert.c
AgeCommit message (Expand)Author
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-11-03Plumb Chacha20-Poly1305 into the IPsec/ESP and PF_KEY frameworksMike Belopuhov
2015-09-11in6_embedscope() needs to lose some weight. Remove the last argument.Claudio Jeker
2015-06-11Move away from using hzto(9); OK dlgMike Belopuhov
2015-05-25fix panic for real and revert previous rev 1.52Sebastian Benoit
2015-05-25fix a panic in import_identities() in case the ID isnt loadedSebastian Benoit
2015-05-23introduce ipsec-id bundles and use them for ipsecflowinfo,Markus Friedl
2015-04-17Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexerMike Belopuhov
2015-04-16change {import,export}_identity so it can be used for policies; ok mikebMarkus Friedl
2015-04-14Remove support for storing credentials and auth information in the kernel.Mike Belopuhov
2015-02-06style(9) nitBret Lambert
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-28remove KPDK. not really used, and a bad choice anyway. ok naddyTed Unangst
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
2013-10-24Remove the number of in6_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-12give tagname2tag and its siblings an extra "create" parameter. if 1, itHenning Brauer
2013-06-05Unbreak the kernel to userspace SADB_X_EXT_TAG message.Reyk Floeter
2013-03-28code that calls timeout functions should include timeout.hTed Unangst
2013-03-09re-arrange the pre-accounting of the objects in the buffer so itTheo de Raadt
2012-09-18remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not setMarkus Friedl
2012-06-29Add support for the Extended (64-bit) Sequence Number as definedMike Belopuhov
2011-04-13export udpencap state of SA to userland; unbreaks sasyncd(8) with NAT/T.Markus Friedl
2010-10-06Retire SkipjackMike Belopuhov
2010-09-22Add AES-GCM Transform Identifiers as specified by IANA inMike Belopuhov
2010-07-01Allow to specify an alternative enc(4) interface for an SA. AllReyk Floeter
2008-10-22#if INET => #ifdef INETMarco Pfatschbacher
2007-09-13Convert MALLOC/FREE to malloc/free and use M_ZERO where applicable.Hans-Joerg Hoexer
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2006-06-01observed by Naddy, found by claudio, strange constructs require strange definesTodd T. Fries
2006-05-30with Naddy prodding, claudio's peril sensitive glasses turning black, andTodd T. Fries
2005-05-27Convert IPSP_IPSEC_x to SADB_X_FLOW_TYPE_x. hshoexer@ ok.Hakan Olsson
2005-05-27Add export_flow()Hans-Joerg Hoexer
2005-05-25AESCTR support for ESP (RFC 3686); ok hshoexerMarkus Friedl
2005-05-24Better SA state reporting. markus@, hshoexer@ ok.Hakan Olsson
2005-05-10support NULL encryption for ESP; ok hshoexer, hoMarkus Friedl
2004-08-10Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding thisHakan Olsson
2004-06-24This moves access to wall and uptime variables in MI code,Thorsten Lockert
2004-06-21make it possble to use IPsec over link-local address (policy table usesJun-ichiro itojun Hagino
2003-12-02UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)Markus Friedl
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-07-24hmac-sha2-{256,384,512} support in AH/ESP auth. markus okJun-ichiro itojun Hagino
2003-02-23typo in export_auth; ok ho@Markus Friedl
2003-02-16KNFTheo de Raadt
2003-02-15skeleton support for LZS compressionJason Wright
2002-06-09Export compression info only if the SA (xform) is initialized.Angelos D. Keromytis
2002-06-07Detect wrap-around of timeout and set it to its maximum value. HackyAngelos D. Keromytis
2002-06-07Add flow type arg to import_flow()Hakan Olsson
2002-06-07While src is rarely NULL, ssrc might be. Fixes PR#2721.Hakan Olsson
2002-05-31Move code out of pfkeyv2.c into import_flow()Angelos D. Keromytis