summaryrefslogtreecommitdiff
path: root/sys
AgeCommit message (Expand)Author
2001-05-30Update to match prototype.Angelos D. Keromytis
2001-05-30With the tags, we don't need to abuse the IPsec API to do socket keying.Angelos D. Keromytis
2001-05-30Handle TDBF_SKIPCRYPTO on output, and PACKET_TAG_IPSEC_IN_CRYPTO_DONEAngelos D. Keromytis
2001-05-30Import/export authentication information for SA.Angelos D. Keromytis
2001-05-30Free remote authentication material on TDB free.Angelos D. Keromytis
2001-05-30Keep track of remote authentication material (like public key) as well.Angelos D. Keromytis
2001-05-30Correctly free information attached to the policy.Angelos D. Keromytis
2001-05-30Free local auth on TDB free.Angelos D. Keromytis
2001-05-30Fields to store local auth information in policy and TDB.Angelos D. Keromytis
2001-05-30Check the LOCAL_AUTH payload.Angelos D. Keromytis
2001-05-30Add AUTH payload.Angelos D. Keromytis
2001-05-30define txp_command() in terms of txp_command2().Jason Wright
2001-05-30expand txp_command2 to handle extension desciptors for long commandsJason Wright
2001-05-30- better handling for capabilities: check the card to make sure it supportsJason Wright
2001-05-30Un-bus_dma(9) mcr1 context and mcr operations (causes problems under load).Jason Wright
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-29pcvt no moreMichael Shalayeff
2001-05-29remove this used to be great console driver; x11 builds w/o it all fine; aaro...Michael Shalayeff
2001-05-29Hardware clock support, via adb.Dale Rahn
2001-05-29Record last use time for SAs.Angelos D. Keromytis
2001-05-29Keep track of when a TDB was last marked/unmared as SKIPCRYPTO, andAngelos D. Keromytis
2001-05-29Fields on TDB for last used and last SKIPCRYPTO status change.Angelos D. Keromytis
2001-05-29Make sure packets that need crypto processing on the NIC don't escapeAngelos D. Keromytis
2001-05-29Verify that packets that haven't had crypto applied to them don't makeAngelos D. Keromytis
2001-05-29Add ipsp_skipcrypto_{mark,unmark}()Angelos D. Keromytis
2001-05-29Set, don't OR the capabilities.Angelos D. Keromytis
2001-05-28#ifdef PMAP_NEW we should call pmap_kremove/pmap_kenter_pa instead ofTodd C. Miller
2001-05-28add BIOC[GS]HDRCMPLT ioctl for BPF, to disable overwriting of link level sour...Dug Song
2001-05-28syncTheo de Raadt
2001-05-28oopsTheo de Raadt
2001-05-28syncArtur Grabowski
2001-05-28Back out part of last broken, untested change.Artur Grabowski
2001-05-28Set the IFCAP_IPSEC capability.Angelos D. Keromytis
2001-05-28IPSECv4 -> IPSECAngelos D. Keromytis
2001-05-28Copy the packet header only if the original mbuf had a packet headerAngelos D. Keromytis
2001-05-28syncTheo de Raadt
2001-05-28newTheo de Raadt
2001-05-28Remove unused code.Angelos D. Keromytis
2001-05-28No need for separate ESP/AH interface capabilities.Angelos D. Keromytis
2001-05-28Don't check IP_ENCAPSULATED.Angelos D. Keromytis
2001-05-28Don't use IPV6_ENCAPSULATED, tags are used instead.Angelos D. Keromytis
2001-05-28IP_ENCAPSULATED is deprecated.Angelos D. Keromytis
2001-05-28Deprecated IPV6_ENCAPSULATEDAngelos D. Keromytis
2001-05-28Don't check for IPV6_ENCAPSULATED, no longer needed since we have the tags.Angelos D. Keromytis
2001-05-28Missed a DPRINTF().Angelos D. Keromytis
2001-05-28Use packet tags to detect loops, same as ip_output()Angelos D. Keromytis
2001-05-28Interface capabilities (based on NetBSD, but merge ethercom and ifnetAngelos D. Keromytis
2001-05-28Remove FA410TX from the invalid list; it's confusing and should be matchedFederico G. Schwindt
2001-05-28regen.Federico G. Schwindt