summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ipsp.h
AgeCommit message (Expand)Author
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
2000-01-21Rename the ip4_* routines to ipip_*, make it so GIF tunnels are notAngelos D. Keromytis
2000-01-13mbuf **, not mbuf * you twit...Angelos D. Keromytis
2000-01-13Add an ip4_input6() for use with IPv6 (just a wrapper forAngelos D. Keromytis
2000-01-13put_flow(), find_flow(), and delete_flow() get a third argument (forAngelos D. Keromytis
2000-01-10Add 10 new ipsec-related sysctl variables...they are currently underAngelos D. Keromytis
2000-01-10Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; theAngelos D. Keromytis
2000-01-09externalize ipsec_aclAngelos D. Keromytis
1999-12-29fix _input/_output proto changes for tcp_signature; angelos@ okMichael Shalayeff
1999-12-25Move the IPsec packet-processing loop to a separate routine, so we canAngelos D. Keromytis
1999-12-08Fix debugging printf compilation.Angelos D. Keromytis
1999-12-08IPv6 header handling, improve IPv4 option handling support.Angelos D. Keromytis
1999-12-06New ESP code that's v4 and v6 friendly.Angelos D. Keromytis
1999-12-04Address independence, IPv6 support, and the -local flag in ipsecadm isAngelos D. Keromytis
1999-10-29New field in tdb, to be used with bridging.Angelos D. Keromytis
1999-10-29Get rid of unnecessary third argument in *_output routines of IPsec.Angelos D. Keromytis
1999-10-29Remove unnecessary argument from ipe4_output() and etherip_output()Angelos D. Keromytis
1999-10-28Add Ethernet-IP encapsulation handling.Angelos D. Keromytis
1999-09-29Critical reliability fix for IPsec. On i386 splsoftclock is notNiklas Hallqvist
1999-08-10Add tdb_satype (PF_KEY SADB_SATYPE_<XXX>) to struct tdbHakan Olsson
1999-08-05Add tdb_walk. tdb_delete() should clean up routes when deleting flows.Hakan Olsson
1999-07-15From angelos@, edits by me, demand keying for PF_KEYNiklas Hallqvist
1999-07-06Added support for TCP MD5 option (RFC 2385).cmetz
1999-06-30remove final low-level crypto knowledge from base ipsec codeTheo de Raadt
1999-06-18split out transforms; some debugging done but there may still be bugs inTheo de Raadt
1999-06-06Ident.Angelos D. Keromytis
1999-05-23SA hash table resizingNiklas Hallqvist
1999-05-20Fix a bug where the ordered expiration list could get out of order. AddNiklas Hallqvist
1999-05-16spltdb introduced, protection for tdb lists and related structures, soNiklas Hallqvist
1999-05-14A new scalable IPsec SA expiration model.Niklas Hallqvist
1999-05-11Remove cruft that wasted space en masse in the IPsec subsystemNiklas Hallqvist
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
1999-02-25Move union sockaddr_union to ip_ipsp.hAngelos D. Keromytis
1999-02-24Update copyright; remove a few annoying debugging printfs.Angelos D. Keromytis
1999-02-24add skipjack support backTheo de Raadt
1999-02-24Remove encap.h include; saner debugging printfs; fix buglets; work withAngelos D. Keromytis
1999-02-17ipsec skipjack, based on free .fi code (some .gov type will test this for me)Theo de Raadt
1999-02-17indentTheo de Raadt
1999-01-08do not use random bits when not necessary, remove 8-byte block dependenceTheo de Raadt
1998-11-25typo in commentNiklas Hallqvist
1998-05-18first step to the setsockopt/getsockopt interface as described inNiels Provos
1998-03-18adapt function arguments to get the expected prototype.Niels Provos
1998-03-18Fix tunnel mode input processing (use ip4_input instead of ipe4_input),Niels Provos
1997-11-24add ripemd-160 as authentication function.Niels Provos
1997-11-04make it easier to add additional transforms. add blowfish and castNiels Provos
1997-07-27expiration messages, fixes, updates, all sorts of thingsNiklas Hallqvist
1997-07-15flags for tunnels and replacing existing routes, sysctl! + tiny bug fixNiels Provos
1997-07-14sysctl...Niels Provos
1997-07-11put old esp/ah and new esp/ah in different files.Niels Provos