summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_spd.c
AgeCommit message (Expand)Author
2007-02-14Consistently spell FALLTHROUGH to appease lint.Jonathan Gray
2006-06-16adjust functions dealing with the routing table to take a table ID asHenning Brauer
2005-02-17miscellaneous typo fixes:Jean-Francois Brousseau
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
2004-06-21make it possble to use IPsec over link-local address (policy table usesJun-ichiro itojun Hagino
2004-04-14simpler ipsp_aux_match() API; ok henning, hshoexerMarkus Friedl
2002-11-12Check for undersized IP header, found by jbm@, ok angelos@Daniel Hartmeier
2002-06-09whitespaceJun-ichiro itojun Hagino
2002-05-31Per-socket policies and authentication. Finally.Angelos D. Keromytis
2002-02-18Search the correct ACQUIRE list --- shifflett@nps.navy.milAngelos D. Keromytis
2002-01-23It looks like there has been one crack smoking and a few cut and pastes.Artur Grabowski
2002-01-23Pool deals fairly well with physical memory shortage, but it doesn't dealArtur Grabowski
2002-01-02at least ; required after label or case; openbsd@davidkrause.comTheo de Raadt
2001-09-24Reset the error return value if the cached TDB matches theAngelos D. Keromytis
2001-08-21When the outgoing socket has BYPASS set, don't bother calling theAngelos D. Keromytis
2001-08-15bcmp done wrong, detected at bakeoff. Hint: always useNiklas Hallqvist
2001-08-06Don't drop packets if we're using an ACQUIRE policy and some errorAngelos D. Keromytis
2001-06-27Use TAILQ_FOREACH() instead of hand-crafted for loops.Angelos D. Keromytis
2001-06-27When determining whether there's a pending acquire wrt a policy, lookAngelos D. Keromytis
2001-06-27Attach IPsec acquire state to policy entries, and relevant cleanups.Angelos D. Keromytis
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
2001-06-26Use the ACQUIRE sequence number to "wake up" acquire state kept andAngelos D. Keromytis
2001-06-26ifdef out some currently unused codeAngelos D. Keromytis
2001-06-26Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ingAngelos D. Keromytis
2001-06-26Use pool(9) for IPsec acquires too.Angelos D. Keromytis
2001-06-26Use pool(9) for IPsec policy structures.Angelos D. Keromytis
2001-06-26Keep the PFKEY sequence number at the TDB, plus a little bit of KNFAngelos D. Keromytis
2001-06-26KNFAngelos D. Keromytis
2001-06-25Copyright.Angelos D. Keromytis
2001-06-24use new timeouts for spd expirations; ho@ okMichael Shalayeff
2001-06-08Trim include files.Angelos D. Keromytis
2001-06-07Simplify SPD logic (and correct some input cases).Angelos D. Keromytis
2001-05-30Match prototype.Angelos D. Keromytis
2001-05-30Correctly free information attached to the policy.Angelos D. Keromytis
2001-05-05Check that SAs also match on the credentials and the IDs. This meansAngelos D. Keromytis
2001-04-23Missing splx in error handling.Artur Grabowski
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
2001-04-10allow host-to-host negotiations if no gateway has been specified.Niels Provos
2001-04-06Move offsetof define into sys/param.hConstantine Sapuntzakis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-15include <machine/cpu.h>, since schednetisr needs to do a splsoftnetBrandon Creighton
2001-02-28Pretty.Angelos D. Keromytis
2001-02-28Handle failures more gracefully.Angelos D. Keromytis
2001-02-28Keep the last packet sent or received that matched an SPD entry, andAngelos D. Keromytis
2000-12-14Compile in non-INET6 kernels.Angelos D. Keromytis
2000-12-14Always look for a suitable TDB if the gateway is left unspecified.Angelos D. Keromytis
2000-11-17All-1s addresses as policy destinations is also reserved for futureAngelos D. Keromytis
2000-10-18Fix compile error if lacking -DINET6Chris Cappuccio
2000-10-14ASKPOLICY message; used by key management to inquire about policyAngelos D. Keromytis
2000-09-29Make sure there's enough data on the mbuf for the TCP/UDP ports (ifAngelos D. Keromytis