summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ipsp.c
AgeCommit message (Expand)Author
2001-05-21Use a reference-counted structure for IPsec IDs and credentials, so weAngelos D. Keromytis
2001-05-05Check that SAs also match on the credentials and the IDs. This meansAngelos D. Keromytis
2001-04-06Move offsetof define into sys/param.hConstantine Sapuntzakis
2001-03-28tdb_inp -> (tdb_inp_in, tdb_inp_out)Angelos D. Keromytis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-27Fix a problem with how TDB timeouts were used in pfkeyv2.Artur Grabowski
2001-03-15convert SA expirations to the new timeouts.Michael Shalayeff
2001-03-13Force a new search for an SA if the latched one is deleted.Angelos D. Keromytis
2001-03-04Store peer's credentials in TDB.Angelos D. Keromytis
2001-02-28Keep the last packet sent or received that matched an SPD entry, andAngelos D. Keromytis
2000-12-28Remove unused and confusing reporting line.Angelos D. Keromytis
2000-12-24Extra argument in the function to tdb_walk(), indicating last TDB.Angelos D. Keromytis
2000-12-18Minor sanity check.Angelos D. Keromytis
2000-12-15send expire messages also for sa's that do not have been used.Niels Provos
2000-09-19SA bundles.Angelos D. Keromytis
2000-09-19Lots and lots of changes.Angelos D. Keromytis
2000-08-03Don't even need to reset ip_sum, if we're not going to compute it hereAngelos D. Keromytis
2000-08-03Avoid unnecessary call to in_cksum().Angelos D. Keromytis
2000-08-03Zeroize ip_sum before computing checksum (just general paranoia).Angelos D. Keromytis
2000-06-19IPv6 IPsec, outbound direction.Jun-ichiro itojun Hagino
2000-06-18Correct function declaration.Angelos D. Keromytis
2000-06-18Pull in the right header for ip6_sprintf(), fix argument.Angelos D. Keromytis
2000-06-18Use ip6_sprintf() rather than the home-cooked inet6_ntoa4()Angelos D. Keromytis
2000-06-18Print++Angelos D. Keromytis
2000-06-06Get rid of tdb_ref, keep indirect pointer to TDB.Angelos D. Keromytis
2000-06-01Fix the German's comment typos.Angelos D. Keromytis
2000-06-01Should learn how to count...Angelos D. Keromytis
2000-06-01Oops, remove bogus comment.Angelos D. Keromytis
2000-06-01Beautify a little bit.Angelos D. Keromytis
2000-06-01Use ipsp_spd_lookup() in ip_output()Angelos D. Keromytis
2000-06-01ipsp_acquire_sa()Angelos D. Keromytis
2000-06-01ipsp_spd_lookup()Angelos D. Keromytis
2000-04-19tdb_ref should be signed, this avoid a problem with flushing the TDBAngelos D. Keromytis
2000-03-28Allow authentication-only ESP (must have broken it in the previousAngelos D. Keromytis
2000-03-28Set the protocol family in the destination address of bypass flows.Angelos D. Keromytis
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-02-09don't need netinet6/in6.hJun-ichiro itojun Hagino
2000-02-07fix include file path related to ip6.Jun-ichiro itojun Hagino
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
2000-01-21Rename the ip4_* routines to ipip_*, make it so GIF tunnels are notAngelos D. Keromytis
2000-01-13Print number of ingress flows in /kern/ipsecAngelos D. Keromytis
2000-01-13put_flow(), find_flow(), and delete_flow() get a third argument (forAngelos D. Keromytis
2000-01-11Correct sa_require handling.Angelos D. Keromytis
2000-01-11Fix check for sen_type.Angelos D. Keromytis
2000-01-11Use default values when requesting dynamic VPNs.Angelos D. Keromytis
2000-01-11Only use defaults if they have sane values.Angelos D. Keromytis
2000-01-10Add 10 new ipsec-related sysctl variables...they are currently underAngelos D. Keromytis
2000-01-10Some more code for dealing with socket IPsec options.Angelos D. Keromytis
2000-01-10Only setup an expiration for embryonic SAs ifAngelos D. Keromytis
2000-01-10Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; theAngelos D. Keromytis
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 19:41:40 +0000