Age | Commit message (Collapse) | Author |
|
|
|
the new key init/zero functions
|
|
they won't disappear behind our back by an expiration. Cleanup expiration
logic too.
|
|
|
|
in an IPSec ESP tunnel. OpenBSD PR 819.
|
|
|
|
|
|
|
|
|
|
Btw, OpenBSD hit 25000 commits a couple commits ago.
|
|
|
|
pfkeyv2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Also make sure some more error conditions get told to the caller.
|
|
|
|
|
|
performance by avoiding unnecessary copies. There was a problem when two
subsequent mbufs were != 0 mod blocksize and the next < blocksize, so we
lost the rest of the last mbuf as IV.
|
|
mbuf in the middle of the chain and had to MGET a new one.
|
|
|
|
|
|
draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal
userland key management applications when security services are requested.
this is only for outgoing connections at the moment, incoming packets
are not yet checked against the selected socket policy.
|
|
<danmcd@eng.sun.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
encryption. some more info for kernfs/ipsec.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
tiny bug fixes
|
|
generalised way of handling transforms.
|