| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | sys: general adoption of SPDX licensing ID tags. | Pedro F. Giffuni | 2017-11-27 | 1 | -0/+2 |
| * | Fix the regression introduced in r275710. | Andrey V. Elsukov | 2017-08-21 | 1 | -2/+2 |
| * | Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hook | Andrey V. Elsukov | 2017-07-31 | 1 | -10/+14 |
| * | Disable IPsec debugging code by default when IPSEC_DEBUG kernel option | Andrey V. Elsukov | 2017-05-29 | 1 | -14/+6 |
| * | Fix possible double releasing for SA and SP references. | Andrey V. Elsukov | 2017-05-23 | 1 | -8/+0 |
| * | Merge projects/ipsec into head/. | Andrey V. Elsukov | 2017-02-06 | 1 | -448/+684 |
| * | sys/net*: minor spelling fixes. | Pedro F. Giffuni | 2016-05-03 | 1 | -1/+1 |
| * | Fix handling of net.inet.ipsec.dfbit=2 variable. | Andrey V. Elsukov | 2016-03-18 | 1 | -1/+1 |
| * | Overhaul if_enc(4) and make it loadable in run-time. | Andrey V. Elsukov | 2015-11-25 | 1 | -42/+19 |
| * | Take extra reference to security policy before calling crypto_dispatch(). | Andrey V. Elsukov | 2015-09-30 | 1 | -14/+2 |
| * | Correct IPSec SA statistic keeping | Ermal Luçi | 2015-07-30 | 1 | -1/+2 |
| * | Fix the comment. We will not do SPD lookup again, because | Andrey V. Elsukov | 2015-04-28 | 1 | -2/+1 |
| * | Since PFIL can change mbuf pointer, we should update pointers after | Andrey V. Elsukov | 2015-04-28 | 1 | -0/+2 |
| * | Fix possible use after free due to security policy deletion. | Andrey V. Elsukov | 2015-04-27 | 1 | -2/+15 |
| * | Change ipsec_address() and ipsec_logsastr() functions to take two | Andrey V. Elsukov | 2015-04-18 | 1 | -10/+11 |
| * | Fix handling of scoped IPv6 addresses in IPSec code. | Andrey V. Elsukov | 2015-04-18 | 1 | -0/+7 |
| * | Remove xform_ipip.c and code related to XF_IP4. | Andrey V. Elsukov | 2015-04-18 | 1 | -92/+128 |
| * | Remove flags and tunalready arguments from ipsec4_process_packet() | Andrey V. Elsukov | 2014-12-11 | 1 | -92/+53 |
| * | Remove route chaching support from ipsec code. It isn't used for some time. | Andrey V. Elsukov | 2014-12-02 | 1 | -1/+0 |
| * | Count statistics for the specific address family. | Andrey V. Elsukov | 2014-11-13 | 1 | -1/+2 |
| * | ipsec6_process_packet is called before ip6_output fixes ip6_plen. | Andrey V. Elsukov | 2014-11-12 | 1 | -5/+2 |
| * | Fix ips_out_nosa errors accounting. | Andrey V. Elsukov | 2014-11-12 | 1 | -1/+10 |
| * | Mechanically convert to if_inc_counter(). | Gleb Smirnoff | 2014-09-19 | 1 | -4/+4 |
| * | The assumption in ipsec4_process_packet() that the payload may be | Marko Zec | 2014-07-01 | 1 | -3/+5 |
| * | Use IPv4 statistics in ipsec4_process_packet() rather than the IPv6 | Bjoern A. Zeeb | 2014-05-28 | 1 | -2/+2 |
| * | Fixed IPv4-in-IPv6 and IPv6-in-IPv4 IPsec tunnels. | VANHULLEBUS Yvan | 2014-05-28 | 1 | -269/+112 |
| * | Remove _IP_VHL* macros and related ifdefs. | Andrey V. Elsukov | 2014-04-16 | 1 | -12/+0 |
| * | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | Gleb Smirnoff | 2013-10-26 | 1 | -0/+1 |
| * | Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP, | Andrey V. Elsukov | 2013-06-20 | 1 | -6/+10 |
| * | Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statistics | Andrey V. Elsukov | 2013-06-20 | 1 | -6/+6 |
| * | Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats. | Andrey V. Elsukov | 2013-04-09 | 1 | -1/+1 |
| * | Mechanically substitute flags from historic mbuf allocator with | Gleb Smirnoff | 2012-12-05 | 1 | -2/+2 |
| * | Couple of changes missed from r241913, which converted | Gleb Smirnoff | 2012-10-22 | 1 | -6/+2 |
| * | Merge the projects/pf/head branch, that was worked on for last six months, | Gleb Smirnoff | 2012-09-08 | 1 | -2/+0 |
| * | Fix a bug introduced in r221129 that leads to a panic wen using bundled | Bjoern A. Zeeb | 2012-07-22 | 1 | -2/+1 |
| * | Add multi-FIB IPv6 support to the core network stack supplementing | Bjoern A. Zeeb | 2012-02-03 | 1 | -1/+1 |
| * | Update packet filter (pf) code to OpenBSD 4.5. | Bjoern A. Zeeb | 2011-06-28 | 1 | -0/+2 |
| * | Make IPsec compile without INET adding appropriate #ifdef checks. | Bjoern A. Zeeb | 2011-04-27 | 1 | -1/+23 |
| * | Fix two SA refcount: | Fabien Thomas | 2011-03-31 | 1 | -1/+0 |
| * | Make the IPsec SADB embedded route cache a union to be able to hold both the | Bjoern A. Zeeb | 2010-10-23 | 1 | -1/+2 |
| * | Remove dead code: | Bjoern A. Zeeb | 2010-10-14 | 1 | -3/+1 |
| * | Style: make the asterisk go with the variable name, not the type. | Bjoern A. Zeeb | 2010-10-14 | 1 | -1/+1 |
| * | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | Robert Watson | 2009-08-01 | 1 | -1/+0 |
| * | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | Robert Watson | 2009-07-14 | 1 | -8/+1 |
| * | Added support for NAT-Traversal (RFC 3948) in IPsec stack. | VANHULLEBUS Yvan | 2009-06-12 | 1 | -0/+55 |
| * | Use NULL rather than 0 when comparing pointers. | Bjoern A. Zeeb | 2009-01-30 | 1 | -2/+2 |
| * | Rather than using hidden includes (with cicular dependencies), | Bjoern A. Zeeb | 2008-12-02 | 1 | -0/+1 |
| * | Step 1.5 of importing the network stack virtualization infrastructure | Marko Zec | 2008-10-02 | 1 | -0/+7 |
| * | Commit step 1 of the vimage project, (network stack) | Bjoern A. Zeeb | 2008-08-17 | 1 | -17/+18 |
| * | Increase statistic counters for enc0 interface when enabled | VANHULLEBUS Yvan | 2008-08-12 | 1 | -0/+11 |
