| Age | Commit message (Expand) | Author |
|---|
| 2014-09-08 | remove uneeded route.h includes | Jonathan Gray |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-04-21 | ip_output() using varargs always struck me as bizarre, esp since it's only | Henning Brauer |
| 2014-04-21 | we'll do fine without casting NULL to struct foo * / void * | Henning Brauer |
| 2013-10-24 | Remove the number of in6_var.h inclusions by moving some functions and | Martin Pieuchot |
| 2013-08-03 | unbreak PMTU-discovery for AES-GCM; ok mikeb@ | Markus Friedl |
| 2013-04-10 | Remove various external variable declaration from sources files and | Martin Pieuchot |
| 2013-03-28 | code that calls timeout functions should include timeout.h | Ted Unangst |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
| 2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | Markus Friedl |
| 2011-03-05 | The function pf_tag_packet() never fails. Remove a redundant check | Alexander Bluhm |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
| 2010-01-10 | Fix two bugs in IPsec/HMAC-SHA2: | Markus Friedl |
| 2008-08-26 | we need to call pf_pkt_addr_changed here too. found by david | Henning Brauer |
| 2008-08-21 | Assign the ip and ip6 pointers in ipsp_process_packet() only if a | Alexander Bluhm |
| 2007-06-01 | apply the "skip ipsec if there are no flows" speedup diff to IPv6 too. | Henning Brauer |
| 2007-05-28 | double pf performance. | Henning Brauer |
| 2007-02-08 | - AH: when computing crypto checksum for output, massage source-routing | Jun-ichiro itojun Hagino |
| 2006-12-19 | TDBF_USEDTUNNEL flag manipulation was inside #ifdef INET. it applies | Jun-ichiro itojun Hagino |
| 2006-12-05 | do not install pmtu routes for transport mode SAs, as they do not | Markus Friedl |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2005-04-12 | handle PMTU for ipip SAs, too; ok hshoexer, cloder | Markus Friedl |
| 2004-09-24 | pmtu support for udpencap; ok hshoexer, ho | Markus Friedl |
| 2004-06-26 | Default enable udpencap. Add 'disable' sysctl to sysctl.conf. markus@ ok. | Hakan Olsson |
| 2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert |
| 2004-06-21 | don't send UDP encapsulated packets w/o UDP header if encap is disabled; ok ho@ | Markus Friedl |
| 2003-12-02 | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | Markus Friedl |
| 2003-07-09 | do not flip ip_len/ip_off in netinet stack. deraadt ok. | Jun-ichiro itojun Hagino |
| 2003-02-19 | add a counter for times ipcomp is skipped because the packet is below the | Jason Wright |
| 2002-08-28 | Fix a problem where passing NULL as a pointer with varargs does not promote | Per Fogelstrom |
| 2002-07-01 | Move mtod() after the m_pullup() --- noted by sam@errno.com (who seems | Angelos D. Keromytis |
| 2002-06-19 | Remove redundant address family check -- sam@errno.com | Angelos D. Keromytis |
| 2002-06-09 | whitespace | Jun-ichiro itojun Hagino |
| 2002-02-19 | IPsec is written ``IPsec'', not ``IPSec''. | Miod Vallat |
| 2001-12-06 | Use hzto() to handle overflow of (hz * timeout) cases --- when using | Angelos D. Keromytis |
| 2001-08-08 | Remove IPCOMP option, it's now part of IPSEC option. You still need to | Jean-Jacques Bernard-Gundol |
| 2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol |
| 2001-06-26 | KNF | Angelos D. Keromytis |
| 2001-06-25 | Copyright. | Angelos D. Keromytis |
| 2001-06-24 | path mtu discovery for ipsec. on receiving a need fragment icmp match | Niels Provos |
| 2001-06-08 | Trim include files. | Angelos D. Keromytis |
| 2001-05-30 | Update to match prototypes. | Angelos D. Keromytis |
| 2001-05-29 | Record last use time for SAs. | Angelos D. Keromytis |
| 2001-05-28 | Don't use IPV6_ENCAPSULATED, tags are used instead. | Angelos D. Keromytis |
| 2001-05-27 | New tags. | Angelos D. Keromytis |
| 2001-05-22 | Add an IPSEC_NEEDED tag if SKIPCRYPTO is set in the TDB | Angelos D. Keromytis |
| 2001-05-20 | Record outgoing SA processing, do loop detection. | Angelos D. Keromytis |
| 2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell |
| 2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis |
| 2001-04-06 | Move offsetof define into sys/param.h | Constantine Sapuntzakis |
