summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2001-06-08Update packet counters correctly.Artur Grabowski
2001-06-08Cut down on include files.Angelos D. Keromytis
2001-06-08Trim include files.Angelos D. Keromytis
2001-06-07Simplify SPD logic (and correct some input cases).Angelos D. Keromytis
2001-06-05Allow boot -c to change number of gre devices. -moj ok angelos@Mats O Jansson
2001-06-05That DPRINTF() is not needed.Angelos D. Keromytis
2001-06-05Add a few DPRINTF()'sAngelos D. Keromytis
2001-06-05That debug message was just too chatty, even as a debug message :-)Angelos D. Keromytis
2001-06-05Clear acquires only if TDB was established correctly.Angelos D. Keromytis
2001-06-05Correct credential matching logic.Angelos D. Keromytis
2001-06-05repair copyright notices for NRL & cmetz; cmetzTheo de Raadt
2001-06-04use faster arc4random() for small amounts fo data, some spaces; niels okMichael Shalayeff
2001-06-04use a faster arc4random() for random spi generation; angelos@ okMichael Shalayeff
2001-06-04use faster arc4random() in tcp_rndiss_next; niels okMichael Shalayeff
2001-06-01use pool allocation for ip fragement queue, from netbsd,Niels Provos
2001-06-01Merge two m_copydata() calls into one, and (hopefully) correct theAngelos D. Keromytis
2001-06-01ipsp_parse_headers() goes down a list of IPv4/IPv6/AH/ESP headers andAngelos D. Keromytis
2001-06-01The IPsec-aware NIC cards don't pass the ICV for later verificationAngelos D. Keromytis
2001-05-31Structure for NIC IPsec processing status reports.Angelos D. Keromytis
2001-05-31Match IPSEC output prototypes.Angelos D. Keromytis
2001-05-31Two fixes from Stevens via davidg@freebsd, bug report byNiels Provos
2001-05-30IPSP_IDENTITY_MBOX -> IPSP_IDENTITY_FQDN, and print type of creds/authAngelos D. Keromytis
2001-05-30No need for last argument in ipip_output()Angelos D. Keromytis
2001-05-30Update to match prototypes.Angelos D. Keromytis
2001-05-30Forgot to update ipsec_output_done()Angelos D. Keromytis
2001-05-30Match prototype.Angelos D. Keromytis
2001-05-30Update to match prototype.Angelos D. Keromytis
2001-05-30With the tags, we don't need to abuse the IPsec API to do socket keying.Angelos D. Keromytis
2001-05-30Handle TDBF_SKIPCRYPTO on output, and PACKET_TAG_IPSEC_IN_CRYPTO_DONEAngelos D. Keromytis
2001-05-30Free remote authentication material on TDB free.Angelos D. Keromytis
2001-05-30Keep track of remote authentication material (like public key) as well.Angelos D. Keromytis
2001-05-30Correctly free information attached to the policy.Angelos D. Keromytis
2001-05-30Free local auth on TDB free.Angelos D. Keromytis
2001-05-30Fields to store local auth information in policy and TDB.Angelos D. Keromytis
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-29Record last use time for SAs.Angelos D. Keromytis
2001-05-29Keep track of when a TDB was last marked/unmared as SKIPCRYPTO, andAngelos D. Keromytis
2001-05-29Fields on TDB for last used and last SKIPCRYPTO status change.Angelos D. Keromytis
2001-05-29Make sure packets that need crypto processing on the NIC don't escapeAngelos D. Keromytis
2001-05-29Add ipsp_skipcrypto_{mark,unmark}()Angelos D. Keromytis
2001-05-28Don't check IP_ENCAPSULATED.Angelos D. Keromytis
2001-05-28Don't use IPV6_ENCAPSULATED, tags are used instead.Angelos D. Keromytis
2001-05-28IP_ENCAPSULATED is deprecated.Angelos D. Keromytis
2001-05-27Reset pkthdr on old mbuf head.Angelos D. Keromytis
2001-05-27And clear the M_PKTHDR flag.Angelos D. Keromytis
2001-05-27Copy tags to first mbuf.Angelos D. Keromytis
2001-05-27Placeholders for the new socket options.Angelos D. Keromytis
2001-05-27Add some IPsec-related IP-level socket options.Angelos D. Keromytis
2001-05-27Remove ipsp_copy_ident() prototype.Angelos D. Keromytis