| Age | Commit message (Expand) | Author |
|---|
| 2006-01-13 | Path MTU discovery for NAT-T. | Marco Pfatschbacher |
| 2005-11-24 | Remove kernfs, okay deraadt@. | Pedro Martelletto |
| 2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
| 2005-05-27 | wrap some comments | Hans-Joerg Hoexer |
| 2004-11-19 | Plug memory leak. Found by pat@. Thanks! | Hans-Joerg Hoexer |
| 2004-04-14 | simpler ipsp_aux_match() API; ok henning, hshoexer | Markus Friedl |
| 2004-01-22 | add gettdbbysrcdst(), just like gettdb(), but compares tdb_src as well; ok mc... | Markus Friedl |
| 2003-12-10 | de-register. deraadt ok | Jun-ichiro itojun Hagino |
| 2003-12-02 | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | Markus Friedl |
| 2003-07-24 | hmac-sha2-{256,384,512} support in AH/ESP auth. markus ok | Jun-ichiro itojun Hagino |
| 2003-05-06 | string cleaning; tedu ok | Theo de Raadt |
| 2002-06-09 | whitespace | Jun-ichiro itojun Hagino |
| 2002-05-31 | New fields in policy and TDB. | Angelos D. Keromytis |
| 2002-03-14 | First round of __P removal in sys | Todd C. Miller |
| 2001-08-19 | Pass the interface (if any) to ipip_input(), so it can be used in | Angelos D. Keromytis |
| 2001-07-05 | Style | Angelos D. Keromytis |
| 2001-07-05 | IPComp itself (include files). angelos@ ok. | Jean-Jacques Bernard-Gundol |
| 2001-06-27 | When determining whether there's a pending acquire wrt a policy, look | Angelos D. Keromytis |
| 2001-06-27 | Also link acquire state to the relevant IPsec policy. | Angelos D. Keromytis |
| 2001-06-27 | Don't cache packets that hit policies -- we'll do that at the PCB for | Angelos D. Keromytis |
| 2001-06-26 | Use pool(9) for IPsec policy structures. | Angelos D. Keromytis |
| 2001-06-26 | Keep the PFKEY sequence number at the TDB, plus a little bit of KNF | Angelos D. Keromytis |
| 2001-06-26 | KNF | Angelos D. Keromytis |
| 2001-06-25 | damn greeks desperate for commits... | Bob Beck |
| 2001-06-25 | KNF | Angelos D. Keromytis |
| 2001-06-25 | Copyright. | Angelos D. Keromytis |
| 2001-06-24 | use new timeouts for spd expirations (hmm cvs did not pick up the file); ho@ ok | Michael Shalayeff |
| 2001-06-24 | path mtu discovery for ipsec. on receiving a need fragment icmp match | Niels Provos |
| 2001-06-24 | remove whitespace | Niels Provos |
| 2001-06-08 | IPSP_POLICY_STATIC flag. | Angelos D. Keromytis |
| 2001-06-07 | Simplify SPD logic (and correct some input cases). | Angelos D. Keromytis |
| 2001-06-01 | ipsp_parse_headers() goes down a list of IPv4/IPv6/AH/ESP headers and | Angelos D. Keromytis |
| 2001-06-01 | The IPsec-aware NIC cards don't pass the ICV for later verification | Angelos D. Keromytis |
| 2001-05-31 | Structure for NIC IPsec processing status reports. | Angelos D. Keromytis |
| 2001-05-30 | IPSP_IDENTITY_MBOX -> IPSP_IDENTITY_FQDN, and print type of creds/auth | Angelos D. Keromytis |
| 2001-05-30 | Forgot to update ipsec_output_done() | Angelos D. Keromytis |
| 2001-05-30 | With the tags, we don't need to abuse the IPsec API to do socket keying. | Angelos D. Keromytis |
| 2001-05-30 | Keep track of remote authentication material (like public key) as well. | Angelos D. Keromytis |
| 2001-05-30 | Fields to store local auth information in policy and TDB. | Angelos D. Keromytis |
| 2001-05-29 | Fields on TDB for last used and last SKIPCRYPTO status change. | Angelos D. Keromytis |
| 2001-05-29 | Add ipsp_skipcrypto_{mark,unmark}() | Angelos D. Keromytis |
| 2001-05-27 | Remove ipsp_copy_ident() prototype. | Angelos D. Keromytis |
| 2001-05-27 | Change prototype of ipsp_common_input_cb() to also accept a packet tag | Angelos D. Keromytis |
| 2001-05-21 | SKIPCRYPTO flag | Angelos D. Keromytis |
| 2001-05-21 | Cosmetic. | Angelos D. Keromytis |
| 2001-05-21 | Use int16_t for the type and length of ipsec_ref objects. | Angelos D. Keromytis |
| 2001-05-21 | Use a reference-counted structure for IPsec IDs and credentials, so we | Angelos D. Keromytis |
| 2001-05-05 | Check that SAs also match on the credentials and the IDs. This means | Angelos D. Keromytis |
| 2001-05-01 | Fix tcp_signature_tdb_input decl; kernel compiles again if TCP_SIGNATURE | Federico G. Schwindt |
| 2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis |
