summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_spd.c
AgeCommit message (Expand)Author
2001-06-27Use TAILQ_FOREACH() instead of hand-crafted for loops.Angelos D. Keromytis
2001-06-27When determining whether there's a pending acquire wrt a policy, lookAngelos D. Keromytis
2001-06-27Attach IPsec acquire state to policy entries, and relevant cleanups.Angelos D. Keromytis
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
2001-06-26Use the ACQUIRE sequence number to "wake up" acquire state kept andAngelos D. Keromytis
2001-06-26ifdef out some currently unused codeAngelos D. Keromytis
2001-06-26Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ingAngelos D. Keromytis
2001-06-26Use pool(9) for IPsec acquires too.Angelos D. Keromytis
2001-06-26Use pool(9) for IPsec policy structures.Angelos D. Keromytis
2001-06-26Keep the PFKEY sequence number at the TDB, plus a little bit of KNFAngelos D. Keromytis
2001-06-26KNFAngelos D. Keromytis
2001-06-25Copyright.Angelos D. Keromytis
2001-06-24use new timeouts for spd expirations; ho@ okMichael Shalayeff
2001-06-08Trim include files.Angelos D. Keromytis
2001-06-07Simplify SPD logic (and correct some input cases).Angelos D. Keromytis
2001-05-30Match prototype.Angelos D. Keromytis
2001-05-30Correctly free information attached to the policy.Angelos D. Keromytis
2001-05-05Check that SAs also match on the credentials and the IDs. This meansAngelos D. Keromytis
2001-04-23Missing splx in error handling.Artur Grabowski
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
2001-04-10allow host-to-host negotiations if no gateway has been specified.Niels Provos
2001-04-06Move offsetof define into sys/param.hConstantine Sapuntzakis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-15include <machine/cpu.h>, since schednetisr needs to do a splsoftnetBrandon Creighton
2001-02-28Pretty.Angelos D. Keromytis
2001-02-28Handle failures more gracefully.Angelos D. Keromytis
2001-02-28Keep the last packet sent or received that matched an SPD entry, andAngelos D. Keromytis
2000-12-14Compile in non-INET6 kernels.Angelos D. Keromytis
2000-12-14Always look for a suitable TDB if the gateway is left unspecified.Angelos D. Keromytis
2000-11-17All-1s addresses as policy destinations is also reserved for futureAngelos D. Keromytis
2000-10-18Fix compile error if lacking -DINET6Chris Cappuccio
2000-10-14ASKPOLICY message; used by key management to inquire about policyAngelos D. Keromytis
2000-09-29Make sure there's enough data on the mbuf for the TCP/UDP ports (ifAngelos D. Keromytis
2000-09-27Fix checking for incoming packets when the remote gateway has beenAngelos D. Keromytis
2000-09-20Add IDENTITY payloads to flow establishment (and cleanup accordingly)Angelos D. Keromytis
2000-09-19Lots and lots of changes.Angelos D. Keromytis
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-23 23:44:54 +0000