aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* ipsec: sprinkle CURVNET_ASSERT_SETMateusz Guzik2022-02-191-0/+4
* ipsec: extend vnet coverage in esp_input/output_cbMateusz Guzik2022-02-191-2/+2
* IPsec: Use protocol-specific malloc types instead of M_XDATA.John Baldwin2022-01-243-31/+40
* syncache: accept packet with no SA when TCP_MD5SIG is setRobert Wing2022-01-091-0/+5
* tcpmd5: return ENOENT when security association not foundRobert Wing2022-01-091-3/+3
* netipsec: use SYSINIT(9) instead of dom_init/dom_destroyGleb Smirnoff2022-01-033-29/+26
* protocols: init with standard SYSINIT(9) or VNET_SYSINITGleb Smirnoff2022-01-031-1/+0
* crypto: Consistently use AES instead of Rijndael128 for the AES-CBC cipher.John Baldwin2021-12-161-1/+1
* ipsec: fix a logic error in key_do_getnewspiWenfeng Liu2021-12-141-1/+1
* ipsec: fix a panic with INVARIANTSRobert Wing2021-12-031-1/+1
* netinet: Remove unneeded mb_unmapped_to_ext() callsMark Johnston2021-11-241-12/+0
* sctp: Remove now-unneeded mb_unmapped_to_ext() callsMark Johnston2021-11-161-12/+0
* ipsec: make sure the lock allocated in key_newsav does not false-shareMateusz Guzik2021-11-141-2/+2
* ipsec: fix edge case detection in key_getnewspidMateusz Guzik2021-11-141-3/+5
* ipsec: add a lock encompassing SPI allocationMateusz Guzik2021-11-031-0/+22
* ipsec: fix edge case detection in key_do_getnewspiMateusz Guzik2021-11-031-5/+6
* ipsec: fix typo part2Wojciech Macek2021-09-271-1/+1
* ipsec: fix typo in commentWojciech Macek2021-09-271-2/+2
* ipsec: Add support for PMTUD for IPv6 tunnelsBartlomiej Grzesik2021-09-242-34/+133
* ipsec: If no PMTU in hostcache assume it's equal to link's MTUBartlomiej Grzesik2021-09-241-4/+18
* ipsec: Add PMTUD support for IPsec IPv4 over IPv6 tunnelBartlomiej Grzesik2021-09-241-6/+12
* ipsec: enter epoch before calling into ipsec_run_hhooksMateusz Guzik2021-09-211-11/+16
* ipsec: Validate the protocol identifier in ipsec4_ctlinput()Mark Johnston2021-09-101-1/+7
* ipsec: fix race condition in key.cWojciech Macek2021-08-131-16/+37
* ipsec: Return error code if no matching SA was foundKornel Duleba2021-08-131-0/+6
* ipsec: Check PMTU before sending a frame.Kornel Duleba2021-08-133-1/+90
* netipsec/key.c: Use ANSI C definition for key_random()Konstantin Belousov2021-08-101-1/+1
* netipsec/keydb.h: fix typoKonstantin Belousov2021-08-101-1/+1
* ipsec: Handle ICMP NEEDFRAG message.Wojciech Macek2021-08-097-0/+64
* socket: Implement SO_RERRORRoy Marples2021-07-281-5/+5
* ipsec: globalize lft zone and zero out buffers at allocation timeMateusz Guzik2021-06-281-12/+11
* Add missing sockaddr length and family validation to various protocolsMark Johnston2021-05-031-1/+1
* Revert "SO_RERROR indicates that receive buffer overflows should be handled a...Alexander V. Chernikov2021-02-081-5/+5
* SO_RERROR indicates that receive buffer overflows should be handled as errors.Alexander V. Chernikov2021-02-081-5/+5
* opencrypto: Introduce crypto_dispatch_async()Mark Johnston2021-02-082-12/+16
* Convert unmapped mbufs before computing checksums in IPsec.John Baldwin2021-01-191-2/+27
* Trigger soft lifetime expiration on sequence numberMarcin Wojtas2020-10-161-1/+6
* Add support for IPsec ESN and pass relevant information to crypto layerMarcin Wojtas2020-10-163-14/+122
* Implement anti-replay algorithm with ESN supportMarcin Wojtas2020-10-166-96/+222
* net: clean up empty lines in .c and .h filesMateusz Guzik2020-09-018-17/+2
* Simplify IPsec transform-specific teardown.John Baldwin2020-06-256-37/+18
* Enter and exit the network epoch for async IPsec callbacks.John Baldwin2020-06-252-6/+23
* Use zfree() to explicitly zero IPsec keys.John Baldwin2020-06-254-19/+4
* Add the SCTP_SUPPORT kernel option.Mark Johnston2020-06-181-3/+3
* Consistently include opt_ipsec.h for consumers of <netipsec/ipsec.h>.John Baldwin2020-05-295-5/+5
* Fix AES-CTR compatibility issue in ipsecMarcin Wojtas2020-05-261-1/+12
* Add support for optional separate output buffers to in-kernel crypto.John Baldwin2020-05-253-24/+12
* Don't pass bogus keys down for NULL algorithms.John Baldwin2020-05-022-5/+9
* Remove support for IPsec algorithms deprecated in r348205 and r360202.John Baldwin2020-05-025-69/+1
* Fix name of 3DES cipher in deprecation warning.John Baldwin2020-04-221-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-19 19:45:41 +0000