summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2021-11-21Fix whitespace and long lines.Alexander Bluhm
2021-11-18printing udpencap_port in ddb requires ntohs not ntohl. use better formatStuart Henderson
2021-11-16To debug IPsec and tdb refcounting it is useful to have "show tdb"Alexander Bluhm
2021-11-11Do not call ip_deliver() recursively from IPsec. As there is noAlexander Bluhm
2021-11-08Use plen consistently.Tobias Heider
2021-11-04The authenticator is removed elsewhere.Tobias Heider
2021-11-01In ipsec_common_input_cb() pass mbuf pointer to pf_test() so thatAlexander Bluhm
2021-10-27The crypto layer needs the kernel lock. ah_zeroize() takes it whenAlexander Bluhm
2021-10-25The implementation of ipsp_spd_inp() is side effect free. It mayAlexander Bluhm
2021-10-25Call a locked variant of tdb_unlink() from tdb_walk(). Fixes aAlexander Bluhm
2021-10-25Protect the tdb hashes with a mutex. Move initialization out ofAlexander Bluhm
2021-10-25Fix use of uninitialized variable 'rpl'.Tobias Heider
2021-10-24Merge esp_input_cb() intp esp_input().Tobias Heider
2021-10-24Remove code duplication by merging the v4 and v6 input functionsAlexander Bluhm
2021-10-24Refactor ah_input() and ah_output() for new crypto API.Tobias Heider
2021-10-24Refactor ipcomp_input() and ipcomp_output(). Remove obsolete code relatedTobias Heider
2021-10-24There are more m_pullup() in IPsec input. Pass down the pointerAlexander Bluhm
2021-10-24Remove 'struct tdb_crypto' allocations from esp_input() and esp_output().Tobias Heider
2021-10-24Remove crp_etype and return errors directly from crypto_invoke()Tobias Heider
2021-10-24Pass the error of the IPsec callback to the caller. The droppedAlexander Bluhm
2021-10-23There is an m_pullup() down in AH input. As it may free or changeAlexander Bluhm
2021-10-23Fix use-after-free in ipcomp_output() introduced by previous commit.Alexander Bluhm
2021-10-23Retire asynchronous crypto API as it is no longer required by any driver andTobias Heider
2021-10-22Make error handling in IPsec consistent. Pass errors to the callers.Alexander Bluhm
2021-10-22After deleting hifn(4) the only provider for the LZS compressionAlexander Bluhm
2021-10-21Remove code to run crypto operations in a task queue. The code wasTobias Heider
2021-10-21Remove duplicate variable ibytes, use plen instead.Tobias Heider
2021-10-13Remove redundant NULL checks in IPsec which are never reached.Alexander Bluhm
2021-10-13The function crypto_dispatch() never returns an error. Make itAlexander Bluhm
2021-10-13The function ipip_output() was registered as .xf_output() xformAlexander Bluhm
2021-10-05Cleanup the error handling in ipsec ipip_output() and consistentlyAlexander Bluhm
2021-10-05Move setting ipsec mtu into a function. The NULL and invalid checkAlexander Bluhm
2021-09-29Global variables to track initialisation behave poorly with MP.Alexander Bluhm
2021-08-10Remove unused `ipa_pcb' from 'ipsec_acquire' structure.mvs
2021-08-09During unidirectional data transmission, a TCP connection may stall.Alexander Bluhm
2021-08-09Fix white spaces.Alexander Bluhm
2021-07-27Revert "Use per-CPU counters for tunnel descriptor block" diff.mvs
2021-07-26Use per-CPU counters for tunnel descriptor block (tdb) statistics.mvs
2021-07-26Do not queue crypto operations for IPsec. The packet entries inAlexander Bluhm
2021-07-26The mbuf header cleanup in revision 1.173 of ip_icmp.c was tooAlexander Bluhm
2021-07-21Also count crypto errors in ipsec_input_cb() like IPsec output inAlexander Bluhm
2021-07-21Propagate errors from crypto_invoke() and count them in IPsec. TheyAlexander Bluhm
2021-07-19Remove `ids' from `ipsec_ids_tree' while following ipsp_ids_insert()mvs
2021-07-18Introduce and use garbage collector for 'ipsec_ids' struct entitiesmvs
2021-07-18The IPsec authentication before decryption used a different replayAlexander Bluhm
2021-07-16Improve comments in IPsec replay window calculation.Alexander Bluhm
2021-07-14Resend the TCP packet only if the MTU locked flag appears at theAlexander Bluhm
2021-07-13Remove unused `PolicyHead' from 'sockaddr_encap' structure.mvs
2021-07-08The xformsw array never changes. Declare struct xformsw constantAlexander Bluhm
2021-07-08Initialize `ipsec_acquire_pool' pool (9) within pfkey_init() instead ofmvs