summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ipsp.c
AgeCommit message (Expand)Author
2000-06-06Get rid of tdb_ref, keep indirect pointer to TDB.Angelos D. Keromytis
2000-06-01Fix the German's comment typos.Angelos D. Keromytis
2000-06-01Should learn how to count...Angelos D. Keromytis
2000-06-01Oops, remove bogus comment.Angelos D. Keromytis
2000-06-01Beautify a little bit.Angelos D. Keromytis
2000-06-01Use ipsp_spd_lookup() in ip_output()Angelos D. Keromytis
2000-06-01ipsp_acquire_sa()Angelos D. Keromytis
2000-06-01ipsp_spd_lookup()Angelos D. Keromytis
2000-04-19tdb_ref should be signed, this avoid a problem with flushing the TDBAngelos D. Keromytis
2000-03-28Allow authentication-only ESP (must have broken it in the previousAngelos D. Keromytis
2000-03-28Set the protocol family in the destination address of bypass flows.Angelos D. Keromytis
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-02-09don't need netinet6/in6.hJun-ichiro itojun Hagino
2000-02-07fix include file path related to ip6.Jun-ichiro itojun Hagino
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
2000-01-21Rename the ip4_* routines to ipip_*, make it so GIF tunnels are notAngelos D. Keromytis
2000-01-13Print number of ingress flows in /kern/ipsecAngelos D. Keromytis
2000-01-13put_flow(), find_flow(), and delete_flow() get a third argument (forAngelos D. Keromytis
2000-01-11Correct sa_require handling.Angelos D. Keromytis
2000-01-11Fix check for sen_type.Angelos D. Keromytis
2000-01-11Use default values when requesting dynamic VPNs.Angelos D. Keromytis
2000-01-11Only use defaults if they have sane values.Angelos D. Keromytis
2000-01-10Add 10 new ipsec-related sysctl variables...they are currently underAngelos D. Keromytis
2000-01-10Some more code for dealing with socket IPsec options.Angelos D. Keromytis
2000-01-10Only setup an expiration for embryonic SAs ifAngelos D. Keromytis
2000-01-10Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; theAngelos D. Keromytis
2000-01-101) Setup a silent TDB expiration for embryonic SAs.Angelos D. Keromytis
2000-01-10Free ACL when deleting TDB.Angelos D. Keromytis
2000-01-09Ports in network order...Angelos D. Keromytis
1999-12-27Print associated interface, if present.Angelos D. Keromytis
1999-12-25Change some function prototypes, dont unnecessarily initialize someAngelos D. Keromytis
1999-12-25Move the IPsec packet-processing loop to a separate routine, so we canAngelos D. Keromytis
1999-12-08comment out call to inet_ntoa6() as we don't have the code yet.Jun-ichiro itojun Hagino
1999-12-06New ESP code that's v4 and v6 friendly.Angelos D. Keromytis
1999-12-05Fix an INET6 dependency (niklas@)Angelos D. Keromytis
1999-12-04Address independence, IPv6 support, and the -local flag in ipsecadm isAngelos D. Keromytis
1999-11-04Add tdb for IPsec bypass flows. gettdb() should be called at spltdb().Hakan Olsson
1999-09-03inet_ntoa4 should manage 4-calls, not just 2Hakan Olsson
1999-08-10Add tdb_satype (PF_KEY SADB_SATYPE_<XXX>) to struct tdbHakan Olsson
1999-08-05Add tdb_walk. tdb_delete() should clean up routes when deleting flows.Hakan Olsson
1999-07-17A good hashing function for IPsec SAs that should remove the risksNiklas Hallqvist
1999-07-15Protect better against rehashing make the kernel run out of resourcesNiklas Hallqvist
1999-07-15From angelos@, edits by me, demand keying for PF_KEYNiklas Hallqvist
1999-07-06ipsec_in_use could get out of sync. (Also niklas@. angelos@ ok)Hakan Olsson
1999-07-06Added support for TCP MD5 option (RFC 2385).cmetz
1999-06-07Fix use of uninitialized TDB hash table in tdb_delete(), introducedAngelos D. Keromytis
1999-06-04forgot to zero sunionNiels Provos
1999-05-23SA hash table resizingNiklas Hallqvist
1999-05-20Fix a bug where the ordered expiration list could get out of order. AddNiklas Hallqvist
1999-05-16spltdb introduced, protection for tdb lists and related structures, soNiklas Hallqvist