summaryrefslogtreecommitdiff
path: root/sys/netinet/ipsec_output.c
AgeCommit message (Expand)Author
2007-02-08- AH: when computing crypto checksum for output, massage source-routingJun-ichiro itojun Hagino
2006-12-19TDBF_USEDTUNNEL flag manipulation was inside #ifdef INET. it appliesJun-ichiro itojun Hagino
2006-12-05do not install pmtu routes for transport mode SAs, as they do notMarkus Friedl
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2005-04-12handle PMTU for ipip SAs, too; ok hshoexer, cloderMarkus Friedl
2004-09-24pmtu support for udpencap; ok hshoexer, hoMarkus Friedl
2004-06-26Default enable udpencap. Add 'disable' sysctl to sysctl.conf. markus@ ok.Hakan Olsson
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
2004-06-21don't send UDP encapsulated packets w/o UDP header if encap is disabled; ok ho@Markus Friedl
2003-12-02UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)Markus Friedl
2003-07-09do not flip ip_len/ip_off in netinet stack. deraadt ok.Jun-ichiro itojun Hagino
2003-02-19add a counter for times ipcomp is skipped because the packet is below theJason Wright
2002-08-28Fix a problem where passing NULL as a pointer with varargs does not promotePer Fogelstrom
2002-07-01Move mtod() after the m_pullup() --- noted by sam@errno.com (who seemsAngelos D. Keromytis
2002-06-19Remove redundant address family check -- sam@errno.comAngelos D. Keromytis
2002-06-09whitespaceJun-ichiro itojun Hagino
2002-02-19IPsec is written ``IPsec'', not ``IPSec''.Miod Vallat
2001-12-06Use hzto() to handle overflow of (hz * timeout) cases --- when usingAngelos D. Keromytis
2001-08-08Remove IPCOMP option, it's now part of IPSEC option. You still need toJean-Jacques Bernard-Gundol
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-26KNFAngelos D. Keromytis
2001-06-25Copyright.Angelos D. Keromytis
2001-06-24path mtu discovery for ipsec. on receiving a need fragment icmp matchNiels Provos
2001-06-08Trim include files.Angelos D. Keromytis
2001-05-30Update to match prototypes.Angelos D. Keromytis
2001-05-29Record last use time for SAs.Angelos D. Keromytis
2001-05-28Don't use IPV6_ENCAPSULATED, tags are used instead.Angelos D. Keromytis
2001-05-27New tags.Angelos D. Keromytis
2001-05-22Add an IPSEC_NEEDED tag if SKIPCRYPTO is set in the TDBAngelos D. Keromytis
2001-05-20Record outgoing SA processing, do loop detection.Angelos D. Keromytis
2001-05-11Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ okAaron Campbell
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
2001-04-06Move offsetof define into sys/param.hConstantine Sapuntzakis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-15convert SA expirations to the new timeouts.Michael Shalayeff
2000-09-19SA bundles.Angelos D. Keromytis
2000-09-19Lots and lots of changes.Angelos D. Keromytis