Age | Commit message (Expand) | Author |
2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
2015-11-03 | Plumb Chacha20-Poly1305 into the IPsec/ESP and PF_KEY frameworks | Mike Belopuhov |
2015-09-11 | in6_embedscope() needs to lose some weight. Remove the last argument. | Claudio Jeker |
2015-06-11 | Move away from using hzto(9); OK dlg | Mike Belopuhov |
2015-05-25 | fix panic for real and revert previous rev 1.52 | Sebastian Benoit |
2015-05-25 | fix a panic in import_identities() in case the ID isnt loaded | Sebastian Benoit |
2015-05-23 | introduce ipsec-id bundles and use them for ipsecflowinfo, | Markus Friedl |
2015-04-17 | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | Mike Belopuhov |
2015-04-16 | change {import,export}_identity so it can be used for policies; ok mikeb | Markus Friedl |
2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
2015-02-06 | style(9) nit | Bret Lambert |
2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
2014-12-28 | remove KPDK. not really used, and a bad choice anyway. ok naddy | Ted Unangst |
2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
2014-07-12 | add a size argument to free. will be used soon, but for now default to 0. | Ted Unangst |
2013-10-24 | Remove the number of in6_var.h inclusions by moving some functions and | Martin Pieuchot |
2013-10-12 | give tagname2tag and its siblings an extra "create" parameter. if 1, it | Henning Brauer |
2013-06-05 | Unbreak the kernel to userspace SADB_X_EXT_TAG message. | Reyk Floeter |
2013-03-28 | code that calls timeout functions should include timeout.h | Ted Unangst |
2013-03-09 | re-arrange the pre-accounting of the objects in the buffer so it | Theo de Raadt |
2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | Markus Friedl |
2012-06-29 | Add support for the Extended (64-bit) Sequence Number as defined | Mike Belopuhov |
2011-04-13 | export udpencap state of SA to userland; unbreaks sasyncd(8) with NAT/T. | Markus Friedl |
2010-10-06 | Retire Skipjack | Mike Belopuhov |
2010-09-22 | Add AES-GCM Transform Identifiers as specified by IANA in | Mike Belopuhov |
2010-07-01 | Allow to specify an alternative enc(4) interface for an SA. All | Reyk Floeter |
2008-10-22 | #if INET => #ifdef INET | Marco Pfatschbacher |
2007-09-13 | Convert MALLOC/FREE to malloc/free and use M_ZERO where applicable. | Hans-Joerg Hoexer |
2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
2006-06-01 | observed by Naddy, found by claudio, strange constructs require strange defines | Todd T. Fries |
2006-05-30 | with Naddy prodding, claudio's peril sensitive glasses turning black, and | Todd T. Fries |
2005-05-27 | Convert IPSP_IPSEC_x to SADB_X_FLOW_TYPE_x. hshoexer@ ok. | Hakan Olsson |
2005-05-27 | Add export_flow() | Hans-Joerg Hoexer |
2005-05-25 | AESCTR support for ESP (RFC 3686); ok hshoexer | Markus Friedl |
2005-05-24 | Better SA state reporting. markus@, hshoexer@ ok. | Hakan Olsson |
2005-05-10 | support NULL encryption for ESP; ok hshoexer, ho | Markus Friedl |
2004-08-10 | Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding this | Hakan Olsson |
2004-06-24 | This moves access to wall and uptime variables in MI code, | Thorsten Lockert |
2004-06-21 | make it possble to use IPsec over link-local address (policy table uses | Jun-ichiro itojun Hagino |
2003-12-02 | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | Markus Friedl |
2003-07-24 | conform to RFC2367 on SADB_xx naming (local name must be prefixed with | Jun-ichiro itojun Hagino |
2003-07-24 | hmac-sha2-{256,384,512} support in AH/ESP auth. markus ok | Jun-ichiro itojun Hagino |
2003-02-23 | typo in export_auth; ok ho@ | Markus Friedl |
2003-02-16 | KNF | Theo de Raadt |
2003-02-15 | skeleton support for LZS compression | Jason Wright |
2002-06-09 | Export compression info only if the SA (xform) is initialized. | Angelos D. Keromytis |
2002-06-07 | Detect wrap-around of timeout and set it to its maximum value. Hacky | Angelos D. Keromytis |
2002-06-07 | Add flow type arg to import_flow() | Hakan Olsson |
2002-06-07 | While src is rarely NULL, ssrc might be. Fixes PR#2721. | Hakan Olsson |
2002-05-31 | Move code out of pfkeyv2.c into import_flow() | Angelos D. Keromytis |