summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2001-06-01ipsp_parse_headers() goes down a list of IPv4/IPv6/AH/ESP headers andAngelos D. Keromytis
2001-06-01The IPsec-aware NIC cards don't pass the ICV for later verificationAngelos D. Keromytis
2001-05-31Structure for NIC IPsec processing status reports.Angelos D. Keromytis
2001-05-31Match IPSEC output prototypes.Angelos D. Keromytis
2001-05-31Two fixes from Stevens via davidg@freebsd, bug report byNiels Provos
2001-05-30IPSP_IDENTITY_MBOX -> IPSP_IDENTITY_FQDN, and print type of creds/authAngelos D. Keromytis
2001-05-30No need for last argument in ipip_output()Angelos D. Keromytis
2001-05-30Update to match prototypes.Angelos D. Keromytis
2001-05-30Forgot to update ipsec_output_done()Angelos D. Keromytis
2001-05-30Match prototype.Angelos D. Keromytis
2001-05-30Update to match prototype.Angelos D. Keromytis
2001-05-30With the tags, we don't need to abuse the IPsec API to do socket keying.Angelos D. Keromytis
2001-05-30Handle TDBF_SKIPCRYPTO on output, and PACKET_TAG_IPSEC_IN_CRYPTO_DONEAngelos D. Keromytis
2001-05-30Free remote authentication material on TDB free.Angelos D. Keromytis
2001-05-30Keep track of remote authentication material (like public key) as well.Angelos D. Keromytis
2001-05-30Correctly free information attached to the policy.Angelos D. Keromytis
2001-05-30Free local auth on TDB free.Angelos D. Keromytis
2001-05-30Fields to store local auth information in policy and TDB.Angelos D. Keromytis
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-29Record last use time for SAs.Angelos D. Keromytis
2001-05-29Keep track of when a TDB was last marked/unmared as SKIPCRYPTO, andAngelos D. Keromytis
2001-05-29Fields on TDB for last used and last SKIPCRYPTO status change.Angelos D. Keromytis
2001-05-29Make sure packets that need crypto processing on the NIC don't escapeAngelos D. Keromytis
2001-05-29Add ipsp_skipcrypto_{mark,unmark}()Angelos D. Keromytis
2001-05-28Don't check IP_ENCAPSULATED.Angelos D. Keromytis
2001-05-28Don't use IPV6_ENCAPSULATED, tags are used instead.Angelos D. Keromytis
2001-05-28IP_ENCAPSULATED is deprecated.Angelos D. Keromytis
2001-05-27Reset pkthdr on old mbuf head.Angelos D. Keromytis
2001-05-27And clear the M_PKTHDR flag.Angelos D. Keromytis
2001-05-27Copy tags to first mbuf.Angelos D. Keromytis
2001-05-27Placeholders for the new socket options.Angelos D. Keromytis
2001-05-27Add some IPsec-related IP-level socket options.Angelos D. Keromytis
2001-05-27Remove ipsp_copy_ident() prototype.Angelos D. Keromytis
2001-05-27ipsp_copy_ident() no longer needed.Angelos D. Keromytis
2001-05-27Also copy the authentication material to the new socket.Angelos D. Keromytis
2001-05-27Free IPsec authentication material on PCB tear down.Angelos D. Keromytis
2001-05-27Keep local authentication material on the PCB.Angelos D. Keromytis
2001-05-27Probably a good idea to pass the NULL to the correct function...Angelos D. Keromytis
2001-05-27If we are passed a packet tag, it's an IPSEC_IN_CRYPTO_DONE so convertAngelos D. Keromytis
2001-05-27Pass a NULL packet tag for now to ipsp_common_input_cb().Angelos D. Keromytis
2001-05-27Change prototype of ipsp_common_input_cb() to also accept a packet tagAngelos D. Keromytis
2001-05-27Forgot to convert this tag.Angelos D. Keromytis
2001-05-27Update pointers to IPsec-related PCB information when allocating newAngelos D. Keromytis
2001-05-27Remove unnecessary XXX comment.Angelos D. Keromytis
2001-05-27Remove unnecessary comment.Angelos D. Keromytis
2001-05-27New tags.Angelos D. Keromytis
2001-05-27Use the new IPsec tags.Angelos D. Keromytis
2001-05-25recover old acecept(2) behavior (no ECONNABORTED) for unix domain socket.Jun-ichiro itojun Hagino
2001-05-24Check return values (tedu@heorot.stanford.edu)Angelos D. Keromytis