summaryrefslogtreecommitdiff
path: root/sys
AgeCommit message (Collapse)Author
2000-06-19IPv6 IPsec, outbound direction.Jun-ichiro itojun Hagino
restriction: if there's any extension header (except fragment) and outbound packet matches tdb, we can't encrypt it. packet will not go out of the node (dropped).
2000-06-19Need to include rijndael.c for crypto | (inet & ipsec) tooThorsten Lockert
2000-06-19de-#ifdef-izeJason Wright
2000-06-19oops, add macbuf to the queue structureJason Wright
2000-06-19add authentication-only handling (easy setup).Jason Wright
remove most of the parameters from ubsec_callback() since they can be found later. ok, so ubsec can now authenticate to itself (doesn't like software, tho)
2000-06-19Upload memory ranges for NEW_NONCONTIG code, this one forgotten before 2.7Miod Vallat
freeze
2000-06-19Small, usable, and it even boots on 4Mb machinesMiod Vallat
2000-06-19Insert missing splx(); me and roberto@ns2.freenix.org.Aaron Campbell
Hacking at USENIX 2000 :-)
2000-06-18Oops on checking inp_tdb etc. (itojun@)Angelos D. Keromytis
2000-06-18Allow S to be overridden like on the other arches; provos@Todd C. Miller
2000-06-18more mbuf sanity checkJun-ichiro itojun Hagino
2000-06-18Correct function declaration.Angelos D. Keromytis
2000-06-18KNFJun-ichiro itojun Hagino
2000-06-18Arguments.Angelos D. Keromytis
2000-06-18Pull in the right header for ip6_sprintf(), fix argument.Angelos D. Keromytis
2000-06-18fix 3des decryptionNiels Provos
2000-06-18remove remains from NRL ipsec codeJun-ichiro itojun Hagino
2000-06-18Use ip6_sprintf() rather than the home-cooked inet6_ntoa4()Angelos D. Keromytis
2000-06-18split long "if" case (cosmetic; preparation for KNF)Jun-ichiro itojun Hagino
2000-06-18Initialize the signal quality cache iff ANCACHEThorsten Lockert
Only allow superuser to clear the signal quality cache
2000-06-18sync with more recent kame.Jun-ichiro itojun Hagino
updates scoped address handling and checksum option.
2000-06-18KNF (sorry craig)Jun-ichiro itojun Hagino
2000-06-18remove now-unnecessary statement due to "for" logic clarfication.Jun-ichiro itojun Hagino
2000-06-18Mark kernel threads as system processes. Make ps hide them by default,Niklas Hallqvist
show them with -k. Do not try to show RSS based values for them as they mess up column alignment. vmstat -f now shows kernel threads separately from rforks too.
2000-06-18correct logic mistake in in6_pcbnotify, due to indentation.Jun-ichiro itojun Hagino
will KNF it soon.
2000-06-18don't reset the chip on NORXD, and certainly don't print a message about itJason Wright
2000-06-18remove unused junkJason Wright
2000-06-18hmm, you'd never know these started out as if_ie.c....Jason Wright
2000-06-18sync with KAME udp6_output(). udp output logic is very different betweenJun-ichiro itojun Hagino
IPv4/v6 so the separation should make more sense. TODO: remove IPv6 case from udp_output() TODO: remove/comment out/#if 0 IPv4 mapped address cases
2000-06-18allow IPsec-related get/setsockopt on IPv6 socket. due to number conflictJun-ichiro itojun Hagino
they must be IPV6_xx instead of IP_xx. actually, since in_ctloutput() does not check address family of inpcb, getsockopt(IPPROTO_IP, IP_xx) may work - never tested this.
2000-06-18use in6_recoverscopeJun-ichiro itojun Hagino
2000-06-18lookup routing table for multicast too, to allow scoped IPv6 multicastJun-ichiro itojun Hagino
to go out of the node. "ping6 ff02::1%wi0" will work fine with this (and should correct route6d behavior too) this is major issue for IPv6. i think this needs to become an erratta entry. sorry about this.
2000-06-18syncOleg Safiullin
2000-06-18oopsOleg Safiullin
2000-06-18syncOleg Safiullin
2000-06-18add GeForce256Oleg Safiullin
2000-06-18Support FIONBIO and FIOASYNC. FIOASYNC is more or less a no-op>Todd C. Miller
2000-06-18change keysize from 8 bytes to 24 for Triple-DES and to 32 for Blowfish.Niels Provos
This probably breaks group sharing. copyin on userland pointers is required, inline key into the argument structure.
2000-06-18syncTheo de Raadt
2000-06-18match 82559ERTheo de Raadt
2000-06-18new type of fxpTheo de Raadt
2000-06-18permit compilation of non-V6 kernelsTheo de Raadt
2000-06-18Register software Rijndael.Angelos D. Keromytis
2000-06-18Add Rijndael (128-bit blocksize) in the software crypto driver.Angelos D. Keromytis
Hacking at OpenBSD Crypto 2000 :-)
2000-06-18Use M_NOWAIT instead of M_DONTWAIT in MALLOC() (even though they'reAngelos D. Keromytis
defined to be the same in mbuf.h)
2000-06-18sanity check: panic if AF_INET6 inpcb is passed to ip_outputJun-ichiro itojun Hagino
2000-06-18remove obsolete IP_DF handling from KAME tree (#if 0'ed all the time)Jun-ichiro itojun Hagino
2000-06-18for mcdonald-simple-ipsec-api get/setsockopt, variable size was mixed up.Jun-ichiro itojun Hagino
in some place sizeof(u_char), and in some place sizeof(int) were used. previous code can cause problem in big endian machines. now it always uses "int" (isakmpd uses int, so it should be okay) set m_len properly on mcdonald-simple-ipsec-api getsockopt.
2000-06-18try to avoid useless m_pullup2Jun-ichiro itojun Hagino
2000-06-18fix off by one error in loop, prevent that odd lengths get passed toNiels Provos
decryption function.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-08 01:35:11 +0000