summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2001-05-30No need for last argument in ipip_output()Angelos D. Keromytis
2001-05-30Update to match prototypes.Angelos D. Keromytis
2001-05-30Forgot to update ipsec_output_done()Angelos D. Keromytis
2001-05-30Match prototype.Angelos D. Keromytis
2001-05-30Update to match prototype.Angelos D. Keromytis
2001-05-30With the tags, we don't need to abuse the IPsec API to do socket keying.Angelos D. Keromytis
2001-05-30Handle TDBF_SKIPCRYPTO on output, and PACKET_TAG_IPSEC_IN_CRYPTO_DONEAngelos D. Keromytis
2001-05-30Free remote authentication material on TDB free.Angelos D. Keromytis
2001-05-30Keep track of remote authentication material (like public key) as well.Angelos D. Keromytis
2001-05-30Correctly free information attached to the policy.Angelos D. Keromytis
2001-05-30Free local auth on TDB free.Angelos D. Keromytis
2001-05-30Fields to store local auth information in policy and TDB.Angelos D. Keromytis
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-29Record last use time for SAs.Angelos D. Keromytis
2001-05-29Keep track of when a TDB was last marked/unmared as SKIPCRYPTO, andAngelos D. Keromytis
2001-05-29Fields on TDB for last used and last SKIPCRYPTO status change.Angelos D. Keromytis
2001-05-29Make sure packets that need crypto processing on the NIC don't escapeAngelos D. Keromytis
2001-05-29Add ipsp_skipcrypto_{mark,unmark}()Angelos D. Keromytis
2001-05-28Don't check IP_ENCAPSULATED.Angelos D. Keromytis
2001-05-28Don't use IPV6_ENCAPSULATED, tags are used instead.Angelos D. Keromytis
2001-05-28IP_ENCAPSULATED is deprecated.Angelos D. Keromytis
2001-05-27Reset pkthdr on old mbuf head.Angelos D. Keromytis
2001-05-27And clear the M_PKTHDR flag.Angelos D. Keromytis
2001-05-27Copy tags to first mbuf.Angelos D. Keromytis
2001-05-27Placeholders for the new socket options.Angelos D. Keromytis
2001-05-27Add some IPsec-related IP-level socket options.Angelos D. Keromytis
2001-05-27Remove ipsp_copy_ident() prototype.Angelos D. Keromytis
2001-05-27ipsp_copy_ident() no longer needed.Angelos D. Keromytis
2001-05-27Also copy the authentication material to the new socket.Angelos D. Keromytis
2001-05-27Free IPsec authentication material on PCB tear down.Angelos D. Keromytis
2001-05-27Keep local authentication material on the PCB.Angelos D. Keromytis
2001-05-27Probably a good idea to pass the NULL to the correct function...Angelos D. Keromytis
2001-05-27If we are passed a packet tag, it's an IPSEC_IN_CRYPTO_DONE so convertAngelos D. Keromytis
2001-05-27Pass a NULL packet tag for now to ipsp_common_input_cb().Angelos D. Keromytis
2001-05-27Change prototype of ipsp_common_input_cb() to also accept a packet tagAngelos D. Keromytis
2001-05-27Forgot to convert this tag.Angelos D. Keromytis
2001-05-27Update pointers to IPsec-related PCB information when allocating newAngelos D. Keromytis
2001-05-27Remove unnecessary XXX comment.Angelos D. Keromytis
2001-05-27Remove unnecessary comment.Angelos D. Keromytis
2001-05-27New tags.Angelos D. Keromytis
2001-05-27Use the new IPsec tags.Angelos D. Keromytis
2001-05-25recover old acecept(2) behavior (no ECONNABORTED) for unix domain socket.Jun-ichiro itojun Hagino
2001-05-24Check return values (tedu@heorot.stanford.edu)Angelos D. Keromytis
2001-05-22Add an IPSEC_NEEDED tag if SKIPCRYPTO is set in the TDBAngelos D. Keromytis
2001-05-22Simplify option printing. ok deraadt@Angelos D. Keromytis
2001-05-21SKIPCRYPTO flagAngelos D. Keromytis
2001-05-21Cosmetic.Angelos D. Keromytis
2001-05-21Use int16_t for the type and length of ipsec_ref objects.Angelos D. Keromytis
2001-05-21Use a reference-counted structure for IPsec IDs and credentials, so weAngelos D. Keromytis