summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_spd.c
AgeCommit message (Expand)Author
2015-10-07Initialize the routing table before domains.Martin Pieuchot
2015-09-10It is time to put inet6 on a diet. Use the flensing knife and cut outClaudio Jeker
2015-07-17manage spd entries by using the radix api directly instead ofBret Lambert
2015-05-23introduce ipsec-id bundles and use them for ipsecflowinfo,Markus Friedl
2015-04-30Merge two identical if() statements in ipsp_acquire_sa(). TheTodd C. Miller
2015-04-16remove unfinished/unused support for socket-attached ipsec-policiesMarkus Friedl
2015-04-14Remove support for storing credentials and auth information in the kernel.Mike Belopuhov
2015-04-13Perform IPsec bypass check on a socket before performing TDB lookups.Mike Belopuhov
2015-04-13Rename gettdbbyaddr to gettdbbydst; OK markus, hshoexer, mpiMike Belopuhov
2015-04-13Remove unused arguments from gettdb* functions; OK markus, hshoexer, mpiMike Belopuhov
2015-03-14Remove some includes include-what-you-use claims don'tJonathan Gray
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-11-25The proliferation of "struct route" in all its flavors didn't makeMartin Pieuchot
2014-11-01Rename rtalloc1() into rtalloc(9) and convert its flags to only enableMartin Pieuchot
2014-10-14Use rtfree() instead of RTFREE(), NULLify some free'd route pointers andMartin Pieuchot
2014-09-27Kill rtalloc() and update rtalloc1() and rtalloc_mpath() to no longerMartin Pieuchot
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2014-01-09bzero/bcmp -> memset/memcmp. ok matthewTed Unangst
2013-10-24Remove the number of in6_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-05-14Fix build with ENCDEBUG defined.Martin Pieuchot
2013-04-11Remove the extern keyword from function declarations, documentMartin Pieuchot
2013-03-28code that calls timeout functions should include timeout.hTed Unangst
2012-07-16add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4)Markus Friedl
2010-09-28missing PR_NOWAITTheo de Raadt
2010-07-09Add support for using IPsec in multiple rdomains.Reyk Floeter
2010-07-02don't reference an item after it has been returned to the poolDavid Krause
2010-01-15Replace pool_get() + bzero() with pool_get(..., PR_ZERO).Charles Longeau
2009-01-27In IPsec acquire mode, if the flow was configured for the "any"Alexander Bluhm
2008-09-10Convert timeout_add() calls using multiples of hz to timeout_add_sec()Bret Lambert
2008-07-22Assign the struct size to sin6_len instead of sin6_family.Alexander Bluhm
2008-06-110 -> PR_NOWAIT (which is defined as 0) in pool_getBret Lambert
2008-05-09more rtrequest() to rtrequest1() replacement.Claudio Jeker
2007-09-01since theHenning Brauer
2007-02-14Consistently spell FALLTHROUGH to appease lint.Jonathan Gray
2006-06-16adjust functions dealing with the routing table to take a table ID asHenning Brauer
2005-02-17miscellaneous typo fixes:Jean-Francois Brousseau
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
2004-06-21make it possble to use IPsec over link-local address (policy table usesJun-ichiro itojun Hagino
2004-04-14simpler ipsp_aux_match() API; ok henning, hshoexerMarkus Friedl
2002-11-12Check for undersized IP header, found by jbm@, ok angelos@Daniel Hartmeier
2002-06-09whitespaceJun-ichiro itojun Hagino
2002-05-31Per-socket policies and authentication. Finally.Angelos D. Keromytis
2002-02-18Search the correct ACQUIRE list --- shifflett@nps.navy.milAngelos D. Keromytis
2002-01-23It looks like there has been one crack smoking and a few cut and pastes.Artur Grabowski
2002-01-23Pool deals fairly well with physical memory shortage, but it doesn't dealArtur Grabowski
2002-01-02at least ; required after label or case; openbsd@davidkrause.comTheo de Raadt
2001-09-24Reset the error return value if the cached TDB matches theAngelos D. Keromytis
2001-08-21When the outgoing socket has BYPASS set, don't bother calling theAngelos D. Keromytis