| Commit message (Expand) | Author | Age | Files | Lines |
* | Remove unused 'plen' variable. | Pawel Jakub Dawidek | 2011-11-26 | 1 | -2/+1 |
* | The esp_max_ivlen global variable is not needed, we can just use | Pawel Jakub Dawidek | 2011-11-26 | 1 | -16/+1 |
* | malloc(M_WAITOK) never fails, so there is no need to check for NULL. | Pawel Jakub Dawidek | 2011-11-26 | 1 | -4/+0 |
* | Eliminate 'err' variable and just use existing 'error'. | Pawel Jakub Dawidek | 2011-11-26 | 2 | -6/+5 |
* | Simplify code a bit. | Pawel Jakub Dawidek | 2011-11-26 | 2 | -12/+6 |
* | There is no need to virtualize esp_max_ivlen. | Pawel Jakub Dawidek | 2011-11-26 | 1 | -6/+5 |
* | Add missing va_end() in an error case to clean up after va_start() | Christian Brueffer | 2011-10-07 | 1 | -0/+1 |
* | Update packet filter (pf) code to OpenBSD 4.5. | Bjoern A. Zeeb | 2011-06-28 | 3 | -0/+6 |
* | Release SP's refcount in key_get_spdbyid(). | VANHULLEBUS Yvan | 2011-05-09 | 1 | -0/+1 |
* | Make IPsec compile without INET adding appropriate #ifdef checks. | Bjoern A. Zeeb | 2011-04-27 | 7 | -67/+112 |
* | Do not allow recursive RFC3173 IPComp payload. | Bjoern A. Zeeb | 2011-04-01 | 1 | -0/+21 |
* | Optimisation in IPSEC(4): | Fabien Thomas | 2011-03-31 | 7 | -75/+69 |
* | Fix two SA refcount: | Fabien Thomas | 2011-03-31 | 2 | -1/+1 |
* | Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant. | VANHULLEBUS Yvan | 2011-02-18 | 4 | -13/+84 |
* | After some off-list discussion, revert a number of changes to the | Dimitry Andric | 2010-11-22 | 3 | -20/+20 |
* | Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughout | Dimitry Andric | 2010-11-14 | 3 | -20/+20 |
* | Announce both IPsec and UDP Encap (NAT-T) if available for | Bjoern A. Zeeb | 2010-10-30 | 1 | -0/+5 |
* | Fix typo in comment. | Thomas Quinot | 2010-10-25 | 1 | -1/+1 |
* | Make the IPsec SADB embedded route cache a union to be able to hold both the | Bjoern A. Zeeb | 2010-10-23 | 3 | -6/+13 |
* | Remove dead code: | Bjoern A. Zeeb | 2010-10-14 | 1 | -3/+1 |
* | Style: make the asterisk go with the variable name, not the type. | Bjoern A. Zeeb | 2010-10-14 | 1 | -1/+1 |
* | MFp4 @178283: | Bjoern A. Zeeb | 2010-05-24 | 1 | -1/+1 |
* | Set SA's natt_type before calling key_mature() in key_add(), | VANHULLEBUS Yvan | 2010-05-05 | 1 | -6/+6 |
* | Update SA's NAT-T stuff before calling key_mature() in key_update(), | VANHULLEBUS Yvan | 2010-05-05 | 1 | -6/+6 |
* | MFP4: @176978-176982, 176984, 176990-176994, 177441 | Bjoern A. Zeeb | 2010-04-29 | 9 | -44/+50 |
* | Locks SPTREE when setting some SP entries to state DEAD. | VANHULLEBUS Yvan | 2010-04-15 | 1 | -0/+6 |
* | Fix a logic error in ipsec code that extracts | Ermal Luçi | 2010-04-02 | 1 | -1/+1 |
* | When tearing down IPsec as part of a (virtual) network stack, | Bjoern A. Zeeb | 2010-03-28 | 1 | -7/+9 |
* | Correct typo in comment. | Pawel Jakub Dawidek | 2010-02-18 | 1 | -1/+1 |
* | Enable IPcomp by default. | Bjoern A. Zeeb | 2009-11-29 | 1 | -1/+1 |
* | Add more statistics variables for IPcomp. | Bjoern A. Zeeb | 2009-11-29 | 2 | -3/+19 |
* | Assimilate very similar input and output code paths | Bjoern A. Zeeb | 2009-11-29 | 1 | -4/+2 |
* | Only add the IPcomp header if crypto reported success and we have a lower | Bjoern A. Zeeb | 2009-11-29 | 1 | -51/+53 |
* | Remove whitespace. | Bjoern A. Zeeb | 2009-11-28 | 1 | -3/+3 |
* | Directly send data uncompressed if the packet payload size is lower than | Bjoern A. Zeeb | 2009-11-28 | 1 | -0/+11 |
* | Correct a typo. | Bjoern A. Zeeb | 2009-11-28 | 1 | -1/+1 |
* | fixed two race conditions when inserting/removing SAs via PFKey, | VANHULLEBUS Yvan | 2009-11-17 | 1 | -2/+3 |
* | Changed an IPSEC_ASSERT to a simple test, as such invalid packets | VANHULLEBUS Yvan | 2009-10-01 | 1 | -3/+9 |
* | When checking traffic endpoint's adresses families in key_spdadd(), | VANHULLEBUS Yvan | 2009-09-16 | 1 | -12/+2 |
* | Silent gcc? Yeah, you wish. What I ment was to silence gcc. | Pawel Jakub Dawidek | 2009-09-06 | 1 | -2/+2 |
* | Initialize state_valid and arraysize variable so gcc won't complain. | Pawel Jakub Dawidek | 2009-09-06 | 1 | -1/+3 |
* | Improve code a bit by eliminating goto and having one unlock per lock. | Pawel Jakub Dawidek | 2009-09-06 | 1 | -4/+3 |
* | Correct typo in comment. | Pawel Jakub Dawidek | 2009-09-06 | 1 | -1/+1 |
* | Rework global locks for interface list and index management, correcting | Robert Watson | 2009-08-23 | 1 | -4/+4 |
* | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | Robert Watson | 2009-08-01 | 11 | -11/+0 |
* | Introduce and use a sysinit-based initialization scheme for virtual | Robert Watson | 2009-07-23 | 2 | -26/+4 |
* | Garbage collect vnet module registrations that have neither constructors | Robert Watson | 2009-07-20 | 3 | -23/+0 |
* | Reimplement and/or implement vnet list locking by replacing a mostly | Robert Watson | 2009-07-19 | 1 | -2/+2 |
* | Remove unused VNET_SET() and related macros; only VNET_GET() is | Robert Watson | 2009-07-16 | 11 | -51/+51 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | Robert Watson | 2009-07-14 | 21 | -713/+274 |