| Commit message (Expand) | Author | Age | Files | Lines |
* | Implement anti-replay algorithm with ESN support | Marcin Wojtas | 2020-10-16 | 1 | -1/+1 |
* | Consistently include opt_ipsec.h for consumers of <netipsec/ipsec.h>. | John Baldwin | 2020-05-29 | 1 | -5/+0 |
* | Remove support for IPsec algorithms deprecated in r348205 and r360202. | John Baldwin | 2020-05-02 | 1 | -2/+0 |
* | Make the warning intervals for deprecated crypto algorithms tunable. | John Baldwin | 2019-06-11 | 1 | -0/+2 |
* | OCF: Add a typedef for session identifiers | Conrad Meyer | 2018-07-13 | 1 | -1/+1 |
* | Add a SPD cache to speed up lookups. | Fabien Thomas | 2018-05-22 | 1 | -2/+3 |
* | Remove unused variables and sysctl declaration. | Andrey V. Elsukov | 2018-02-19 | 1 | -4/+0 |
* | sys: further adoption of SPDX licensing ID tags. | Pedro F. Giffuni | 2017-11-20 | 1 | -0/+2 |
* | crypto(9) is called from ipsec in CRYPTO_F_CBIFSYNC mode. This is working | Fabien Thomas | 2017-11-03 | 1 | -0/+2 |
* | Fix the regression introduced in r275710. | Andrey V. Elsukov | 2017-08-21 | 1 | -1/+1 |
* | Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hook | Andrey V. Elsukov | 2017-07-31 | 1 | -1/+2 |
* | Disable IPsec debugging code by default when IPSEC_DEBUG kernel option | Andrey V. Elsukov | 2017-05-29 | 1 | -0/+6 |
* | Introduce the concept of IPsec security policies scope. | Andrey V. Elsukov | 2017-03-07 | 1 | -0/+6 |
* | Merge projects/ipsec into head/. | Andrey V. Elsukov | 2017-02-06 | 1 | -98/+80 |
* | Remove stale function declaration | Andrey V. Elsukov | 2016-04-21 | 1 | -2/+0 |
* | Constify mbuf pointer for IPSEC functions where mbuf isn't modified. | Andrey V. Elsukov | 2016-04-21 | 1 | -7/+8 |
* | Overhaul if_enc(4) and make it loadable in run-time. | Andrey V. Elsukov | 2015-11-25 | 1 | -8/+9 |
* | Implement the sadb_x_policy_priority field as it is done in Linux: | Fabien Thomas | 2015-11-17 | 1 | -0/+1 |
* | IPSEC, remove variable argument function its already due. | Ermal Luçi | 2015-07-21 | 1 | -1/+1 |
* | Make ipsec_in_reject() static. We use ipsec[46]_in_reject() instead. | Andrey V. Elsukov | 2015-04-27 | 1 | -1/+0 |
* | Change ipsec_address() and ipsec_logsastr() functions to take two | Andrey V. Elsukov | 2015-04-18 | 1 | -2/+2 |
* | Fix possible memory leak and several races in the IPsec policy management | Andrey V. Elsukov | 2015-02-24 | 1 | -0/+3 |
* | Rename ip4_def_policy variable to def_policy. It is used by both IPv4 and | Andrey V. Elsukov | 2014-12-24 | 1 | -19/+4 |
* | Remove flag/flags argument from the following functions: | Andrey V. Elsukov | 2014-12-11 | 1 | -3/+2 |
* | Remove flags and tunalready arguments from ipsec4_process_packet() | Andrey V. Elsukov | 2014-12-11 | 1 | -2/+1 |
* | Remove now unused mtag argument from ipsec*_common_input_cb. | Andrey V. Elsukov | 2014-12-11 | 1 | -1/+1 |
* | Remove __P() macro. | Andrey V. Elsukov | 2014-12-03 | 1 | -30/+28 |
* | Remove route chaching support from ipsec code. It isn't used for some time. | Andrey V. Elsukov | 2014-12-02 | 1 | -0/+4 |
* | Remove unused structure declarations. | Andrey V. Elsukov | 2014-12-02 | 1 | -11/+0 |
* | Fix multiple incorrect SYSCTL arguments in the kernel: | Hans Petter Selasky | 2014-10-21 | 1 | -1/+1 |
* | Merge 'struct ip6protosw' and 'struct protosw' into one. Now we have | Kevin Lo | 2014-08-08 | 1 | -3/+3 |
* | Remove more constants related to static sysctl nodes. The MAXID constants | John Baldwin | 2014-02-25 | 1 | -4/+0 |
* | Remove most of the remaining sysctl name list macros. They were only | John Baldwin | 2013-08-26 | 1 | -34/+0 |
* | Remove the large part of struct ipsecstat. Only few fields of this | Andrey V. Elsukov | 2013-07-23 | 1 | -30/+4 |
* | Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat, | Andrey V. Elsukov | 2013-07-09 | 1 | -3/+5 |
* | Prepare network statistics structures for migration to PCPU counters. | Andrey V. Elsukov | 2013-07-09 | 1 | -42/+42 |
* | Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statistics | Andrey V. Elsukov | 2013-06-20 | 1 | -0/+1 |
* | Optimisation in IPSEC(4): | Fabien Thomas | 2011-03-31 | 1 | -6/+10 |
* | MFP4: @176978-176982, 176984, 176990-176994, 177441 | Bjoern A. Zeeb | 2010-04-29 | 1 | -22/+22 |
* | Correct typo in comment. | Pawel Jakub Dawidek | 2009-09-06 | 1 | -1/+1 |
* | Remove unused VNET_SET() and related macros; only VNET_GET() is | Robert Watson | 2009-07-16 | 1 | -14/+14 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | Robert Watson | 2009-07-14 | 1 | -20/+32 |
* | Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL | Bjoern A. Zeeb | 2009-05-23 | 1 | -0/+1 |
* | Try to remove/assimilate as much of formerly IPv4/6 specific | Bjoern A. Zeeb | 2009-02-08 | 1 | -3/+3 |
* | Make ipsec_getpolicybysock() static and no longer export it. It has not | Bjoern A. Zeeb | 2008-12-27 | 1 | -2/+0 |
* | Unify ipsec[46]_delete_pcbpolicy in ipsec_delete_pcbpolicy. | Bjoern A. Zeeb | 2008-11-27 | 1 | -1/+1 |
* | Change the initialization methodology for global variables scheduled | Marko Zec | 2008-11-19 | 1 | -0/+1 |
* | Step 1.5 of importing the network stack virtualization infrastructure | Marko Zec | 2008-10-02 | 1 | -1/+4 |
* | Commit step 1 of the vimage project, (network stack) | Bjoern A. Zeeb | 2008-08-17 | 1 | -2/+2 |
* | In addition to the ipsec_osdep.h removal a week ago, now also eliminate | Bjoern A. Zeeb | 2008-05-24 | 1 | -1/+0 |