summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ipsp.c
AgeCommit message (Expand)Author
2010-01-10Fix two bugs in IPsec/HMAC-SHA2:Markus Friedl
2009-08-12don't confuse chars with strings; ok oga@Martynas Venckus
2009-06-02Shuffle function declarations a bit; ipsp_kern doesn't actually exist,Bret Lambert
2009-06-02Fix an off-by-one in the ddb-only debugging function tdb_hashstats.Owain Ainsworth
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
2008-10-22#if INET => #ifdef INETMarco Pfatschbacher
2008-09-15remove dead stores and newly created unused variables.Charles Longeau
2008-09-10Convert timeout_add() calls using multiples of hz to timeout_add_sec()Bret Lambert
2008-04-18use arc4random_uniform() for random number requests that are not aDamien Miller
2007-10-29MALLOC/FREE -> malloc/freeCharles Longeau
2007-10-09MALLOC+bzero -> malloc+M_ZERO. Don't forget FREE->free this time.Kenneth R Westerback
2007-02-14Consistently spell FALLTHROUGH to appease lint.Jonathan Gray
2007-01-18allow kernels with TCP_SIGNATURE (aka tcp md5sig), but without IPSEC toHenning Brauer
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2006-01-13Path MTU discovery for NAT-T.Marco Pfatschbacher
2005-11-24Remove kernfs, okay deraadt@.Pedro Martelletto
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
2005-05-27long overdue snprintf cleanup in kernfs related codeHans-Joerg Hoexer
2005-04-21handle return value of snprintf correctlyHans-Joerg Hoexer
2004-11-19Plug memory leak. Found by pat@. Thanks!Hans-Joerg Hoexer
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
2004-04-14simpler ipsp_aux_match() API; ok henning, hshoexerMarkus Friedl
2004-03-31in gettdbbysrcdst(), allow matching with either src or dst beeing a wildcardHenning Brauer
2004-02-15check TDBF_INVALID for TCP MD5 SA lookups; ok mcbride, henningMarkus Friedl
2004-01-27in gettdbbysrcdst(): hash by SRC and lookup SA in the tdbsrc[] hash tableMarkus Friedl
2004-01-22add gettdbbysrcdst(), just like gettdb(), but compares tdb_src as well; ok mc...Markus Friedl
2003-12-02UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)Markus Friedl
2003-05-09string cleaning; ok teduTheo de Raadt
2003-05-06string cleaning; tedu okTheo de Raadt
2002-11-19Use queue.h macrosJason Wright
2002-06-09whitespaceJun-ichiro itojun Hagino
2002-06-09Comment out currently-unused code (it's there for the ethernet-ipsecAngelos D. Keromytis
2002-05-31Move some common code to separate routines; also, fix the problem ofAngelos D. Keromytis
2002-03-14First round of __P removal in sysTodd C. Miller
2002-02-23Print compression algorithm name too.Angelos D. Keromytis
2001-12-05KNF whackTheo de Raadt
2001-10-03If the TDB doesn't have an attached src/dst ID, it can be used for anyAngelos D. Keromytis
2001-09-05use %ll instead of %qTheo de Raadt
2001-08-08Remove IPCOMP option, it's now part of IPSEC option. You still need toJean-Jacques Bernard-Gundol
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-27Minor nits.Angelos D. Keromytis
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
2001-06-26Keep the PFKEY sequence number at the TDB, plus a little bit of KNFAngelos D. Keromytis
2001-06-26KNFAngelos D. Keromytis
2001-06-25Copyright.Angelos D. Keromytis
2001-06-24print mtu of tdb if discoveredNiels Provos
2001-06-24Print TDBF_USEDTUNNEL in ipsp_kern()Angelos D. Keromytis
2001-06-23Having to update queue(3) for DLIST_* is a major PITA; thus, just useAngelos D. Keromytis
2001-06-23Use DLIST for tags.Angelos D. Keromytis
2001-06-08Trim include files.Angelos D. Keromytis