Age | Commit message (Expand) | Author |
2000-06-06 | Get rid of tdb_ref, keep indirect pointer to TDB. | Angelos D. Keromytis |
2000-06-01 | ipsp_acquire_sa() | Angelos D. Keromytis |
2000-06-01 | Prototype for ipsp_spd_lookup() | Angelos D. Keromytis |
2000-04-19 | tdb_ref should be signed, this avoid a problem with flushing the TDB | Angelos D. Keromytis |
2000-03-29 | Conform to crypto framework changes for IVs. | Angelos D. Keromytis |
2000-03-17 | Cryptographic services framework, and software "device driver". The | Angelos D. Keromytis |
2000-02-28 | move crypto code | Theo de Raadt |
2000-01-27 | Merge "old" and "new" ESP and AH in two files (one for each). | Angelos D. Keromytis |
2000-01-21 | Rename the ip4_* routines to ipip_*, make it so GIF tunnels are not | Angelos D. Keromytis |
2000-01-13 | mbuf **, not mbuf * you twit... | Angelos D. Keromytis |
2000-01-13 | Add an ip4_input6() for use with IPv6 (just a wrapper for | Angelos D. Keromytis |
2000-01-13 | put_flow(), find_flow(), and delete_flow() get a third argument (for | Angelos D. Keromytis |
2000-01-10 | Add 10 new ipsec-related sysctl variables...they are currently under | Angelos D. Keromytis |
2000-01-10 | Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; the | Angelos D. Keromytis |
2000-01-09 | externalize ipsec_acl | Angelos D. Keromytis |
1999-12-29 | fix _input/_output proto changes for tcp_signature; angelos@ ok | Michael Shalayeff |
1999-12-25 | Move the IPsec packet-processing loop to a separate routine, so we can | Angelos D. Keromytis |
1999-12-08 | Fix debugging printf compilation. | Angelos D. Keromytis |
1999-12-08 | IPv6 header handling, improve IPv4 option handling support. | Angelos D. Keromytis |
1999-12-06 | New ESP code that's v4 and v6 friendly. | Angelos D. Keromytis |
1999-12-04 | Address independence, IPv6 support, and the -local flag in ipsecadm is | Angelos D. Keromytis |
1999-10-29 | New field in tdb, to be used with bridging. | Angelos D. Keromytis |
1999-10-29 | Get rid of unnecessary third argument in *_output routines of IPsec. | Angelos D. Keromytis |
1999-10-29 | Remove unnecessary argument from ipe4_output() and etherip_output() | Angelos D. Keromytis |
1999-10-28 | Add Ethernet-IP encapsulation handling. | Angelos D. Keromytis |
1999-09-29 | Critical reliability fix for IPsec. On i386 splsoftclock is not | Niklas Hallqvist |
1999-08-10 | Add tdb_satype (PF_KEY SADB_SATYPE_<XXX>) to struct tdb | Hakan Olsson |
1999-08-05 | Add tdb_walk. tdb_delete() should clean up routes when deleting flows. | Hakan Olsson |
1999-07-15 | From angelos@, edits by me, demand keying for PF_KEY | Niklas Hallqvist |
1999-07-06 | Added support for TCP MD5 option (RFC 2385). | cmetz |
1999-06-30 | remove final low-level crypto knowledge from base ipsec code | Theo de Raadt |
1999-06-18 | split out transforms; some debugging done but there may still be bugs in | Theo de Raadt |
1999-06-06 | Ident. | Angelos D. Keromytis |
1999-05-23 | SA hash table resizing | Niklas Hallqvist |
1999-05-20 | Fix a bug where the ordered expiration list could get out of order. Add | Niklas Hallqvist |
1999-05-16 | spltdb introduced, protection for tdb lists and related structures, so | Niklas Hallqvist |
1999-05-14 | A new scalable IPsec SA expiration model. | Niklas Hallqvist |
1999-05-11 | Remove cruft that wasted space en masse in the IPsec subsystem | Niklas Hallqvist |
1999-04-11 | Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default. | Niklas Hallqvist |
1999-03-27 | add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoing | Niels Provos |
1999-02-25 | Move union sockaddr_union to ip_ipsp.h | Angelos D. Keromytis |
1999-02-24 | Update copyright; remove a few annoying debugging printfs. | Angelos D. Keromytis |
1999-02-24 | add skipjack support back | Theo de Raadt |
1999-02-24 | Remove encap.h include; saner debugging printfs; fix buglets; work with | Angelos D. Keromytis |
1999-02-17 | ipsec skipjack, based on free .fi code (some .gov type will test this for me) | Theo de Raadt |
1999-02-17 | indent | Theo de Raadt |
1999-01-08 | do not use random bits when not necessary, remove 8-byte block dependence | Theo de Raadt |
1998-11-25 | typo in comment | Niklas Hallqvist |
1998-05-18 | first step to the setsockopt/getsockopt interface as described in | Niels Provos |
1998-03-18 | adapt function arguments to get the expected prototype. | Niels Provos |