summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ipsp.h
AgeCommit message (Expand)Author
2001-05-29Fields on TDB for last used and last SKIPCRYPTO status change.Angelos D. Keromytis
2001-05-29Add ipsp_skipcrypto_{mark,unmark}()Angelos D. Keromytis
2001-05-27Remove ipsp_copy_ident() prototype.Angelos D. Keromytis
2001-05-27Change prototype of ipsp_common_input_cb() to also accept a packet tagAngelos D. Keromytis
2001-05-21SKIPCRYPTO flagAngelos D. Keromytis
2001-05-21Cosmetic.Angelos D. Keromytis
2001-05-21Use int16_t for the type and length of ipsec_ref objects.Angelos D. Keromytis
2001-05-21Use a reference-counted structure for IPsec IDs and credentials, so weAngelos D. Keromytis
2001-05-05Check that SAs also match on the credentials and the IDs. This meansAngelos D. Keromytis
2001-05-01Fix tcp_signature_tdb_input decl; kernel compiles again if TCP_SIGNATUREFederico G. Schwindt
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-27Fix a problem with how TDB timeouts were used in pfkeyv2.Artur Grabowski
2001-03-15convert SA expirations to the new timeouts.Michael Shalayeff
2001-03-04Store peer's credentials in TDB.Angelos D. Keromytis
2001-02-28Keep the last packet sent or received that matched an SPD entry, andAngelos D. Keromytis
2001-02-12putting #error into an include file is totally wrongTheo de Raadt
2001-02-11If IPSEC is defined but not CRYPTO, spit an error; angelos@ okFederico G. Schwindt
2000-12-24Extra argument in the function to tdb_walk(), indicating last TDB.Angelos D. Keromytis
2000-10-14ASKPOLICY message; used by key management to inquire about policyAngelos D. Keromytis
2000-10-09AES support.Angelos D. Keromytis
2000-09-20Add IDENTITY payloads to flow establishment (and cleanup accordingly)Angelos D. Keromytis
2000-09-19SA bundles.Angelos D. Keromytis
2000-09-19Lots and lots of changes.Angelos D. Keromytis
2000-06-18Use ip6_sprintf() rather than the home-cooked inet6_ntoa4()Angelos D. Keromytis
2000-06-18IPv6 AH/ESP support, inbound side only. tested with KAME.Jun-ichiro itojun Hagino
2000-06-06Get rid of tdb_ref, keep indirect pointer to TDB.Angelos D. Keromytis
2000-06-01ipsp_acquire_sa()Angelos D. Keromytis
2000-06-01Prototype for ipsp_spd_lookup()Angelos D. Keromytis
2000-04-19tdb_ref should be signed, this avoid a problem with flushing the TDBAngelos D. Keromytis
2000-03-29Conform to crypto framework changes for IVs.Angelos D. Keromytis
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-02-28move crypto codeTheo de Raadt
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
2000-01-21Rename the ip4_* routines to ipip_*, make it so GIF tunnels are notAngelos D. Keromytis
2000-01-13mbuf **, not mbuf * you twit...Angelos D. Keromytis
2000-01-13Add an ip4_input6() for use with IPv6 (just a wrapper forAngelos D. Keromytis
2000-01-13put_flow(), find_flow(), and delete_flow() get a third argument (forAngelos D. Keromytis
2000-01-10Add 10 new ipsec-related sysctl variables...they are currently underAngelos D. Keromytis
2000-01-10Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; theAngelos D. Keromytis
2000-01-09externalize ipsec_aclAngelos D. Keromytis
1999-12-29fix _input/_output proto changes for tcp_signature; angelos@ okMichael Shalayeff
1999-12-25Move the IPsec packet-processing loop to a separate routine, so we canAngelos D. Keromytis
1999-12-08Fix debugging printf compilation.Angelos D. Keromytis
1999-12-08IPv6 header handling, improve IPv4 option handling support.Angelos D. Keromytis
1999-12-06New ESP code that's v4 and v6 friendly.Angelos D. Keromytis
1999-12-04Address independence, IPv6 support, and the -local flag in ipsecadm isAngelos D. Keromytis
1999-10-29New field in tdb, to be used with bridging.Angelos D. Keromytis
1999-10-29Get rid of unnecessary third argument in *_output routines of IPsec.Angelos D. Keromytis
1999-10-29Remove unnecessary argument from ipe4_output() and etherip_output()Angelos D. Keromytis