summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2_parsemessage.c
AgeCommit message (Collapse)Author
2001-06-08Yet more include file cleanup.Angelos D. Keromytis
2001-06-05repair copyright notices for NRL & cmetz; cmetzTheo de Raadt
2001-06-05Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwardsNiklas Hallqvist
compatibility problems in isakmpd, at least 2.8 stable can compile current isakmpd now. angelos@ ok
2001-05-30Import/export authentication information for SA.Angelos D. Keromytis
2001-05-30Check the LOCAL_AUTH payload.Angelos D. Keromytis
2001-05-05Use the new M_* malloc typesAngelos D. Keromytis
2001-04-19Include NUL-termination in identity extension length computationNiklas Hallqvist
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
information will be stored in the TDB. ok ho@ provos@
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs.
2001-03-21Don't force sin6_port to be zero.Angelos D. Keromytis
2001-03-04Import/export credentials from TDB.Angelos D. Keromytis
2000-12-14sync with pfkey rfc. you need to rebuild ipsecadm and isakmpd after this.Niels Provos
okay angelos@
2000-10-14ASKPOLICY message; used by key management to inquire about policyAngelos D. Keromytis
triggering an ACQUIRE.
2000-09-29Don't use an SA payload for ADDFLOW/DELFLOW.Angelos D. Keromytis
2000-09-21Correctly handle srcid/dstid.Angelos D. Keromytis
2000-09-20Allow IDENTITY payloads in ADDFLOW messages.Angelos D. Keromytis
2000-09-19SA bundles.Angelos D. Keromytis
2000-09-19SPD-driven IPsec.Angelos D. Keromytis
2000-01-23Allow BITMAP_ADDRESS_DST in ADDFLOW messages.Angelos D. Keromytis
1999-12-20sockaddr_in6 is padded to 32 bytes.Angelos D. Keromytis
1999-07-02rename SADB_foo_X_bar to SADB_X_foo_barTheo de Raadt
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
1999-03-05restrict replay window size to 32Theo de Raadt
1999-02-25Allow PF_KEY kernel message replies for X_ADDFLOW, X_DELFLOW, and X_GRPSPISAngelos D. Keromytis
1999-02-25Removed osdep.h dependencies.Angelos D. Keromytis
1999-02-24PF_KEY_V2, with local extensions for SPD management.Angelos D. Keromytis