| Age | Commit message (Expand) | Author |
|---|
| 2015-05-23 | introduce ipsec-id bundles and use them for ipsecflowinfo, | Markus Friedl |
| 2015-04-17 | Stubs and support code for NIC-enabled IPsec bite the dust. | Mike Belopuhov |
| 2015-04-17 | Remove unused ipsp_parse_headers that was supposed to parse packets | Mike Belopuhov |
| 2015-04-16 | remove unfinished/unused support for socket-attached ipsec-policies | Markus Friedl |
| 2015-04-14 | make ipsp_address thread safe; ok mpi | Mike Belopuhov |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-04-13 | Make filter argument to ipsp_aux_match optional like the rest of them. | Mike Belopuhov |
| 2015-04-13 | Rename gettdbbyaddr to gettdbbydst; OK markus, hshoexer, mpi | Mike Belopuhov |
| 2015-04-13 | Remove unused arguments from gettdb* functions; OK markus, hshoexer, mpi | Mike Belopuhov |
| 2015-04-10 | replace the guts of tdb_hash with SipHash24 | David Gwynne |
| 2015-03-14 | Remove some includes include-what-you-use claims don't | Jonathan Gray |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-12-09 | More malloc() -> mallocarray() in the kernel. | Doug Hogan |
| 2014-11-18 | move arc4random prototype to systm.h. more appropriate for most code | Ted Unangst |
| 2014-09-14 | remove uneeded proc.h includes | Jonathan Gray |
| 2014-09-08 | remove uneeded route.h includes | Jonathan Gray |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-07-12 | add a size argument to free. will be used soon, but for now default to 0. | Ted Unangst |
| 2014-07-08 | decouple struct uvmexp into a new file, so that uvm_extern.h and sysctl.h | Theo de Raadt |
| 2014-04-14 | "struct pkthdr" holds a routing table ID, not a routing domain one. | Martin Pieuchot |
| 2014-01-09 | bzero/bcmp -> memset/memcmp. ok matthew | Ted Unangst |
| 2013-11-11 | Replace most of our formating functions to convert IPv4/6 addresses from | Martin Pieuchot |
| 2013-10-24 | Remove the number of in6_var.h inclusions by moving some functions and | Martin Pieuchot |
| 2013-07-04 | These functions are only used in debug code, so put them under | Martin Pieuchot |
| 2013-04-11 | Remove the extern keyword from function declarations, document | Martin Pieuchot |
| 2013-04-10 | Remove various external variable declaration from sources files and | Martin Pieuchot |
| 2013-04-09 | Remove read-only ipsec variables and directly use defines instead. | Martin Pieuchot |
| 2013-03-28 | code that calls timeout functions should include timeout.h | Ted Unangst |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
| 2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | Markus Friedl |
| 2011-05-11 | Pre-allocate memory to avoid sleeping after performing a lookup, which | Bret Lambert |
| 2011-03-31 | - use nitems(); no binary change | Jasper Lievisse Adriaanse |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
| 2010-04-20 | remove proc.h include from uvm_map.h. This has far reaching effects, as | Ted Unangst |
| 2010-01-10 | Fix two bugs in IPsec/HMAC-SHA2: | Markus Friedl |
| 2009-08-12 | don't confuse chars with strings; ok oga@ | Martynas Venckus |
| 2009-06-02 | Shuffle function declarations a bit; ipsp_kern doesn't actually exist, | Bret Lambert |
| 2009-06-02 | Fix an off-by-one in the ddb-only debugging function tdb_hashstats. | Owain Ainsworth |
| 2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
| 2008-10-22 | #if INET => #ifdef INET | Marco Pfatschbacher |
| 2008-09-15 | remove dead stores and newly created unused variables. | Charles Longeau |
| 2008-09-10 | Convert timeout_add() calls using multiples of hz to timeout_add_sec() | Bret Lambert |
| 2008-04-18 | use arc4random_uniform() for random number requests that are not a | Damien Miller |
| 2007-10-29 | MALLOC/FREE -> malloc/free | Charles Longeau |
| 2007-10-09 | MALLOC+bzero -> malloc+M_ZERO. Don't forget FREE->free this time. | Kenneth R Westerback |
| 2007-02-14 | Consistently spell FALLTHROUGH to appease lint. | Jonathan Gray |
| 2007-01-18 | allow kernels with TCP_SIGNATURE (aka tcp md5sig), but without IPSEC to | Henning Brauer |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2006-01-13 | Path MTU discovery for NAT-T. | Marco Pfatschbacher |
