aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* Adopt revision 1.76 and 1.77 from NetBSD:Andrey V. Elsukov2018-01-241-42/+26
* Merge revision 1.35 from NetBSD:Andrey V. Elsukov2018-01-241-2/+2
* Do pass removing some write-only variables from the kernel.Alexander Kabaev2017-12-254-15/+0
* Do better cleaning in key_destroy() for VIMAGE case.Andrey V. Elsukov2017-12-011-0/+19
* sys: general adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-274-0/+8
* sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-2015-0/+30
* ipsec: Use the same keysize values for HMAC as prior to r324017Conrad Meyer2017-11-151-1/+1
* Use correct pointer in key_updateaddresses() when updating NAT-T config.Andrey V. Elsukov2017-11-031-1/+1
* crypto(9) is called from ipsec in CRYPTO_F_CBIFSYNC mode. This is workingFabien Thomas2017-11-034-0/+22
* opencrypto: Loosen restriction on HMAC key sizesConrad Meyer2017-09-261-2/+2
* Fix possible double releasing for SA reference.Andrey V. Elsukov2017-09-011-5/+2
* Remove stale comments.Andrey V. Elsukov2017-08-211-2/+0
* Fix the regression introduced in r275710.Andrey V. Elsukov2017-08-214-14/+18
* Make user supplied data checks a bit stricter.Andrey V. Elsukov2017-08-091-5/+21
* Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hookAndrey V. Elsukov2017-07-313-15/+20
* Build kdebug_secreplay() function only when IPSEC_DEBUG is defined.Andrey V. Elsukov2017-06-011-4/+2
* Disable IPsec debugging code by default when IPSEC_DEBUG kernel optionAndrey V. Elsukov2017-05-297-26/+28
* Fix possible double releasing for SA and SP references.Andrey V. Elsukov2017-05-234-8/+6
* Fix possible double releasing for SA reference.Andrey V. Elsukov2017-05-234-31/+41
* Remove register keyword from sys/ and ANSIfy prototypesEd Maste2017-05-171-2/+2
* Fix SP refcount leak.Andrey V. Elsukov2017-04-261-2/+6
* Add large replay widow support to setkey(8) and libipsec.Andrey V. Elsukov2017-04-131-25/+78
* When we are doing SA lookup for TCP-MD5, check both source andAndrey V. Elsukov2017-04-041-2/+4
* GC some unused declarations.Andrey V. Elsukov2017-04-031-22/+0
* Fix bug in r308972 that leads to panic when non-compressed IPCompAndrey V. Elsukov2017-03-291-2/+2
* Introduce the concept of IPsec security policies scope.Andrey V. Elsukov2017-03-072-71/+118
* For translated packets do not adjust UDP checksum if it is zero.Andrey V. Elsukov2017-02-181-0/+3
* Fix LINT build for powerpc.Andrey V. Elsukov2017-02-161-26/+30
* Move tcp_fields_to_net() static inline into tcp_var.h, just below itsGleb Smirnoff2017-02-101-10/+0
* Merge projects/ipsec into head/.Andrey V. Elsukov2017-02-0622-5489/+7256
* Add direction argument to ipsec_setspidx_inpcb() function.Andrey V. Elsukov2017-01-081-7/+10
* Add a missing headerScott Long2016-11-261-0/+1
* netipsec: fix build after 309144Ed Maste2016-11-261-0/+2
* IPsec RFC6479 support for replay window sizes up to 2^32 - 32 packets.Fabien Thomas2016-11-256-119/+217
* Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.Kevin Lo2016-09-151-2/+2
* Remove redundant sanity checks from ipsec[46]_common_input_cb().Andrey V. Elsukov2016-08-311-16/+0
* Get closer to a VIMAGE network stack teardown from top to bottom ratherBjoern A. Zeeb2016-06-212-2/+2
* netipsec: Fix minor style nitConrad Meyer2016-05-101-1/+1
* sys/net*: minor spelling fixes.Pedro F. Giffuni2016-05-033-10/+10
* netipsec: Don't leak memory when deep copy failsConrad Meyer2016-04-261-0/+1
* Fix build for NOINET and NOINET6 kernels.Andrey V. Elsukov2016-04-241-20/+33
* Use ipsec_address() function to print IP addresses.Andrey V. Elsukov2016-04-241-16/+8
* Handle non-compressed packets for IPComp in tunnel mode.Andrey V. Elsukov2016-04-243-1/+201
* Remove stale function declarationAndrey V. Elsukov2016-04-211-2/+0
* Constify mbuf pointer for IPSEC functions where mbuf isn't modified.Andrey V. Elsukov2016-04-215-45/+51
* kernel: use our nitems() macro when it is available through param.h.Pedro F. Giffuni2016-04-192-5/+5
* sys/net* : for pointers replace 0 with NULL.Pedro F. Giffuni2016-04-154-12/+12
* Fix handling of net.inet.ipsec.dfbit=2 variable.Andrey V. Elsukov2016-03-181-1/+1
* Put IPSec's anouncement of its successful intialisation under bootverbose:Robert Watson2016-03-131-1/+2
* Set tres to NULL to avoid a double free if the m_pullup() below fails.Mark Johnston2016-03-021-0/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-17 18:25:34 +0000