aboutsummaryrefslogtreecommitdiff
path: root/sbin/setkey
Commit message (Collapse)AuthorAgeFilesLines
* o Add missed dot.Maxim Konovalov2008-09-291-1/+1
| | | | Notes: svn path=/head/; revision=183456
* o Allow setkey(8) to recognize esp as a protocoal name for spdadd.Maxim Konovalov2008-01-121-0/+1
| | | | | | | | | PR: bin/107392 Submitted by: Eugene Grosbein MFC after: 1 month Notes: svn path=/head/; revision=175248
* Cleanup of userland __P useKevin Lo2007-11-074-50/+50
| | | | Notes: svn path=/head/; revision=173412
* Commit IPv6 support for FAST_IPSEC to the tree.George V. Neville-Neil2007-07-016-15/+14
| | | | | | | | | | | This commit includes all remaining changes for the time being including user space updates. Submitted by: bz Approved by: re Notes: svn path=/head/; revision=171135
* Integrate the Camellia Block Cipher. For more information see RFC 4132George V. Neville-Neil2007-05-092-0/+2
| | | | | | | | | | and its bibliography. Submitted by: Tomoyuki Okazaki <okazaki at kick dot gr dot jp> MFC after: 1 month Notes: svn path=/head/; revision=169425
* Markup fixes.Ruslan Ermilov2006-09-181-19/+27
| | | | Notes: svn path=/head/; revision=162395
* Obey MK_INET6_SUPPORT.Yaroslav Tykhiy2006-07-271-3/+8
| | | | | | | This is also a good chance to apply style.Makefile(5) in some cases. Notes: svn path=/head/; revision=160747
* Include other AES key lengths in the comment.Pawel Jakub Dawidek2006-05-131-1/+1
| | | | Notes: svn path=/head/; revision=158515
* Langauge fixes required to disambiguate some statements.George V. Neville-Neil2006-01-081-84/+114
| | | | | | | Explain the examples. Notes: svn path=/head/; revision=154117
* fixed a crush when either -lh or -ls option is used.Hajimu UMEMOTO2005-10-131-3/+3
| | | | | | | Obtained from: KAME Notes: svn path=/head/; revision=151293
* setkey(8) is not WARNS=2 compliant, yet.Hajimu UMEMOTO2005-10-131-0/+2
| | | | Notes: svn path=/head/; revision=151291
* Fixed the misplaced $FreeBSD$.Ruslan Ermilov2005-02-091-1/+2
| | | | Notes: svn path=/head/; revision=141580
* Added the EXIT STATUS section where appropriate.Ruslan Ermilov2005-01-171-1/+1
| | | | Notes: svn path=/head/; revision=140368
* Fixed display type.Ruslan Ermilov2005-01-151-1/+1
| | | | Notes: svn path=/head/; revision=140294
* Reapply traditionally lost fixes, fixed some more.Ruslan Ermilov2004-06-051-38/+43
| | | | | | | This manpage needs an English clenup. Notes: svn path=/head/; revision=130134
* check if the null encryption is supported or not.Hajimu UMEMOTO2004-05-131-1/+11
| | | | | | | | Requested by: bms Obtained from: KAME Notes: svn path=/head/; revision=129183
* Fix regression in setkey whereby parser would fail to recognise tcp asBruce M Simpson2004-03-311-0/+1
| | | | | | | | | | both a security protocol and an upper level protocol for encapsulation. PR: bin/63616 Submitted by: ume@ Notes: svn path=/head/; revision=127684
* Fixed mispellings of '\0' as NULL.Bruce Evans2004-03-111-2/+2
| | | | Notes: svn path=/head/; revision=126843
* Initial import of RFC 2385 (TCP-MD5) digest support.Bruce M Simpson2004-02-113-4/+22
| | | | | | | | | | | | | | | | | This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net Notes: svn path=/head/; revision=125681
* enable aes-xcbc-mac and aes-ctr, again.Hajimu UMEMOTO2003-11-101-3/+3
| | | | Notes: svn path=/head/; revision=122412
* - do hexdump on send. set length field properlyHajimu UMEMOTO2003-11-056-920/+1220
| | | | | | | | | | | | | | | | | | | | - check for encryption/authentication key together with algorithm. - warned if a deprecated encryption algorithm (that includes "simple") is specified. - changed the syntax how to define a policy of a ICMPv6 type and/or a code, like spdadd ::/0 ::/0 icmp6 134,0 -P out none; - random cleanup in parser. - use yyfatal, or return -1 after yyerror. - deal with strdup() failure. - permit scope notation in policy string (-P esp/tunnel/foo%scope-bar%scope/use) - simplify /prefix and [port]. - g/c some unused symbols. Obtained from: KAME Notes: svn path=/head/; revision=122108
* - styleHajimu UMEMOTO2003-10-171-25/+28
| | | | | | | | | | | - rename variable - use strlcpy - const'fy Obtained from: KAME Notes: svn path=/head/; revision=121155
* - support AES counter mode for ESP.Hajimu UMEMOTO2003-10-132-0/+6
| | | | | | | | | | | - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME Notes: svn path=/head/; revision=121071
* - support AES XCBC MAC for AHHajimu UMEMOTO2003-10-132-0/+3
| | | | | | | | | - correct SADB_X_AALG_RIPEMD160HMAC to 8 Obtained from: KAME Notes: svn path=/head/; revision=121061
* - RIPEMD160 supportHajimu UMEMOTO2003-10-122-0/+3
| | | | | | | | | - pass size arg to ah->result (avoid assuming result buffer size) Obtained from: KAME Notes: svn path=/head/; revision=121021
* Use NI_xxx macros.Munechika SUMIKAWA2003-04-161-1/+1
| | | | | | | | Obtained from: KAME MFC after: 1 week Notes: svn path=/head/; revision=113552
* Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,Jens Schweikhardt2003-01-012-4/+4
| | | | | | | especially in troff files. Notes: svn path=/head/; revision=108533
* english(4) police.Jens Schweikhardt2002-12-271-1/+1
| | | | Notes: svn path=/head/; revision=108317
* Fix spacing for -P (policy) examples.Bill Fenner2002-07-271-10/+3
| | | | Notes: svn path=/head/; revision=100768
* s/IPSEC/IPsec according to RFCsMarc Fonvieille2002-07-231-1/+1
| | | | | | | | | PR: in part docs/38668 Reviewed by: charnier MFC after: 10 days Notes: svn path=/head/; revision=100555
* The .Nm utilityPhilippe Charnier2002-07-141-7/+10
| | | | Notes: svn path=/head/; revision=99968
* Don't install scriptdump which is written in Perl. This isHajimu UMEMOTO2002-05-161-1/+1
| | | | | | | corresponding to removal of Perl from base system. Notes: svn path=/head/; revision=96738
* mdoc(7) police: protect trailing full stops of abbreviationsRuslan Ermilov2001-08-101-1/+1
| | | | | | | with a trailing zero-width space: `e.g.\&'. Notes: svn path=/head/; revision=81449
* can not -> cannotSheldon Hearn2001-08-081-1/+1
| | | | Notes: svn path=/head/; revision=81298
* mdoc(7) police:Ruslan Ermilov2001-08-071-14/+8
| | | | | | | | | | Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block. Notes: svn path=/head/; revision=81251
* printed current sequence number of the SA. accordingly, changedHajimu UMEMOTO2001-08-061-2/+2
| | | | | | | | | | | into sadb_x_sa2_sequence from sadb_x_sa2_reserved3 in the sadb_x_sa2 structure. Also the output of setkey is changed. sequence number of the sadb is replaced to the end of the output. Obtained from: KAME Notes: svn path=/head/; revision=81215
* Perform a major cleanup of the usr.sbin Makefiles.David E. O'Brien2001-07-201-8/+11
| | | | | | | | These are not perfectly in agreement with each other style-wise, but they are orders of orders of magnitude more consistent style-wise than before. Notes: svn path=/head/; revision=80029
* Remove whitespace at EOL.Dima Dorfman2001-07-151-1/+1
| | | | Notes: svn path=/head/; revision=79755
* mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).Ruslan Ermilov2001-07-061-2/+2
| | | | Notes: svn path=/head/; revision=79366
* Sync with recent KAME.Hajimu UMEMOTO2001-06-115-94/+270
| | | | | | | | | | | | | | | | | | | | | This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge. TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT. Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks Notes: svn path=/head/; revision=78064
* Allow ``ip4'' as an ``upperspec'' value, and update the manBrian Somers2001-05-172-0/+4
| | | | | | | | | | | | | | | | | | | | | page with *all* the permissible values. This should really be spelt ipencap (as /etc/protocols does), but a precedent has already been set by the ipproto array in setkey.c. It would be nice if /etc/protocols was parsed for the upperspec field, but I don't do yacc/lex... This change allows policies that only encrypt the encapsulated packets passing between the endpoints of a gif tunnel. Setting such a policy means that you can still talk directly (and unencrypted) between the public IP numbers with (say) ssh. MFC after: 1 week Notes: svn path=/head/; revision=76750
* mdoc(7) police: normalize .Nd.Ruslan Ermilov2001-04-181-1/+1
| | | | Notes: svn path=/head/; revision=75670
* beforeinstall -> SCRIPTS.Ruslan Ermilov2001-04-071-9/+3
| | | | Notes: svn path=/head/; revision=75286
* - Backout botched attempt to introduce MANSECT feature.Ruslan Ermilov2001-03-261-0/+1
| | | | | | | - MAN[1-9] -> MAN. Notes: svn path=/head/; revision=74816
* Set the default manual section for usr.sbin/ to 8.Ruslan Ermilov2001-03-201-1/+0
| | | | Notes: svn path=/head/; revision=74532
* mdoc(7) police: split punctuation characters + misc fixes.Ruslan Ermilov2001-02-011-8/+6
| | | | Notes: svn path=/head/; revision=71898
* Minor layout fixes.Ben Smithurst2001-01-011-0/+4
| | | | | | | | PR: 24004 Submitted by: Jimmy Olgeni <olgeni@uli.it> Notes: svn path=/head/; revision=70581
* Change the spelling of `.' to `.' from .OBJDIR since `.' really is whereDavid E. O'Brien2000-12-051-1/+1
| | | | | | | generated files land. Also give precedence to generated files. Notes: svn path=/head/; revision=69640
* The GCC 2.96 snapshots have slightly different rules for finding includeDavid E. O'Brien2000-12-011-1/+1
| | | | | | | | | | files. Mostly -I${.CURDIR} was needed -- especially for YACC generated files as the new cpp does not look in the ultimate source file (ie, the .y file)'s directory as told by the "#line" directive. Some were misspellings of "-I${.CURDIR}" as "-I.". Notes: svn path=/head/; revision=69453
* mdoc(7) police: use the new features of the Nm macro.Ruslan Ermilov2000-11-201-5/+5
| | | | Notes: svn path=/head/; revision=68965
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-16 22:32:48 +0000