Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-06-08 | Yet more include file cleanup. | Angelos D. Keromytis | |
2001-06-05 | repair copyright notices for NRL & cmetz; cmetz | Theo de Raadt | |
2001-06-05 | Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwards | Niklas Hallqvist | |
compatibility problems in isakmpd, at least 2.8 stable can compile current isakmpd now. angelos@ ok | |||
2001-05-30 | Import/export authentication information for SA. | Angelos D. Keromytis | |
2001-05-30 | Check the LOCAL_AUTH payload. | Angelos D. Keromytis | |
2001-05-05 | Use the new M_* malloc types | Angelos D. Keromytis | |
2001-04-19 | Include NUL-termination in identity extension length computation | Niklas Hallqvist | |
2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis | |
information will be stored in the TDB. ok ho@ provos@ | |||
2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis | |
security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs. | |||
2001-03-21 | Don't force sin6_port to be zero. | Angelos D. Keromytis | |
2001-03-04 | Import/export credentials from TDB. | Angelos D. Keromytis | |
2000-12-14 | sync with pfkey rfc. you need to rebuild ipsecadm and isakmpd after this. | Niels Provos | |
okay angelos@ | |||
2000-10-14 | ASKPOLICY message; used by key management to inquire about policy | Angelos D. Keromytis | |
triggering an ACQUIRE. | |||
2000-09-29 | Don't use an SA payload for ADDFLOW/DELFLOW. | Angelos D. Keromytis | |
2000-09-21 | Correctly handle srcid/dstid. | Angelos D. Keromytis | |
2000-09-20 | Allow IDENTITY payloads in ADDFLOW messages. | Angelos D. Keromytis | |
2000-09-19 | SA bundles. | Angelos D. Keromytis | |
2000-09-19 | SPD-driven IPsec. | Angelos D. Keromytis | |
2000-01-23 | Allow BITMAP_ADDRESS_DST in ADDFLOW messages. | Angelos D. Keromytis | |
1999-12-20 | sockaddr_in6 is padded to 32 bytes. | Angelos D. Keromytis | |
1999-07-02 | rename SADB_foo_X_bar to SADB_X_foo_bar | Theo de Raadt | |
1999-03-27 | add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoing | Niels Provos | |
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company. | |||
1999-03-05 | restrict replay window size to 32 | Theo de Raadt | |
1999-02-25 | Allow PF_KEY kernel message replies for X_ADDFLOW, X_DELFLOW, and X_GRPSPIS | Angelos D. Keromytis | |
1999-02-25 | Removed osdep.h dependencies. | Angelos D. Keromytis | |
1999-02-24 | PF_KEY_V2, with local extensions for SPD management. | Angelos D. Keromytis | |