| Age | Commit message (Expand) | Author |
|---|
| 2018-08-28 | Add per-TDB counters and a new SADB extension to export them to | Martin Pieuchot |
| 2018-07-12 | Introduce ipsec_output_cb() to merge duplicate code and account for | Martin Pieuchot |
| 2018-07-11 | Convert AH & IPcomp to ipsec_input_cb() and count drops on input. | Martin Pieuchot |
| 2018-07-10 | Introduce new IPsec (per-CPU) statistics and refactor ESP input | Martin Pieuchot |
| 2017-11-20 | Keep kernel defines under #ifdef _KERNEL. | Martin Pieuchot |
| 2017-11-15 | Unbreak ENCDEBUG kernels by declaring `encdebug' in ip_ipsp.h | Martin Pieuchot |
| 2017-11-14 | Introduce ipsec_sysctl() and move IPsec tunables where they belong. | Martin Pieuchot |
| 2017-11-08 | Make {ah,esp,ipcomp}stat use percpu counters. | Visa Hankala |
| 2017-10-27 | Dump IPsec flows by iterating over the rafdix-tree. | Martin Pieuchot |
| 2017-10-16 | Last changes before running IPsec w/o KERNEL_LOCK(). | Martin Pieuchot |
| 2017-06-26 | Split a part of tdb_delete() into tdb_unlink() so that we can remove | Patrick Wildt |
| 2017-05-22 | Move IPsec forward and local policy check functions to ipsec_input.c | Alexander Bluhm |
| 2017-05-18 | The function name ip4_input() is confusing as it also handles IPv6 | Alexander Bluhm |
| 2017-05-06 | Convert the xformsw definition to C99 style initializer. Also fix | Alexander Bluhm |
| 2017-04-14 | Pass down the address family through the pr_input calls. This | Alexander Bluhm |
| 2017-02-07 | Error propagation does neither make sense for ip input path nor for | Alexander Bluhm |
| 2017-01-29 | Change the IPv4 pr_input function to the way IPv6 is implemented, | Alexander Bluhm |
| 2017-01-26 | Reduce the difference between struct protosw and ip6protosw. The | Alexander Bluhm |
| 2017-01-25 | Since raw_input() and route_input() are gone from pr_input, we can | Alexander Bluhm |
| 2016-09-15 | move from RB macros to RBT functions | David Gwynne |
| 2015-12-03 | remove some unused defines. ok mikeb | Ted Unangst |
| 2015-08-25 | correct #if/#endif guard comment | Theo de Raadt |
| 2015-07-17 | manage spd entries by using the radix api directly instead of | Bret Lambert |
| 2015-05-23 | introduce ipsec-id bundles and use them for ipsecflowinfo, | Markus Friedl |
| 2015-04-17 | Stubs and support code for NIC-enabled IPsec bite the dust. | Mike Belopuhov |
| 2015-04-17 | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | Mike Belopuhov |
| 2015-04-16 | ipa_inp_next is unused; via mikeb@ | Markus Friedl |
| 2015-04-16 | remove unfinished/unused support for socket-attached ipsec-policies | Markus Friedl |
| 2015-04-14 | make ipsp_address thread safe; ok mpi | Mike Belopuhov |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-04-13 | Rename gettdbbyaddr to gettdbbydst; OK markus, hshoexer, mpi | Mike Belopuhov |
| 2015-04-13 | Remove unused arguments from gettdb* functions; OK markus, hshoexer, mpi | Mike Belopuhov |
| 2015-03-26 | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | Mike Belopuhov |
| 2015-01-19 | mikeb points out that 'struct ipsec_policy' can also be hidden by _KERNEL | Theo de Raadt |
| 2015-01-19 | First step of hiding many kernel-only parts of <netinet/ip_ipsp.h> | Theo de Raadt |
| 2014-12-23 | unifdef some more INET. v4 4life. | Ted Unangst |
| 2014-11-25 | The proliferation of "struct route" in all its flavors didn't make | Martin Pieuchot |
| 2013-11-11 | Replace most of our formating functions to convert IPv4/6 addresses from | Martin Pieuchot |
| 2013-07-04 | These functions are only used in debug code, so put them under | Martin Pieuchot |
| 2013-04-11 | Remove the extern keyword from function declarations, document | Martin Pieuchot |
| 2013-02-14 | Merge of an original work by markus@ and gerhard@ to increase | Mike Belopuhov |
| 2012-10-18 | simplify checkreplaywindow() API; make call/return code handling consistent | Markus Friedl |
| 2012-10-08 | Forward declare struct m_tag in netinet/ip_ipsp.h so we don't need to | Camiel Dobbelaar |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
| 2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | Markus Friedl |
| 2012-07-16 | add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4) | Markus Friedl |
| 2012-06-29 | Add support for the Extended (64-bit) Sequence Number as defined | Mike Belopuhov |
| 2010-10-06 | Retire Skipjack | Mike Belopuhov |
| 2010-09-23 | remove m_pad in favor of m_inject as it's equivalent to m_inject | Mike Belopuhov |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
