summaryrefslogtreecommitdiff
path: root/sys/netinet6/ipsec.c
AgeCommit message (Expand)Author
2003-12-04Dynamic sysctl.atatat
2003-11-17Revert the (default) ip_id algorithm to the pre-randomid algorithm,jonathan
2003-10-03no need to clear mbuf flags here; sync w/kameitojun
2003-10-03when dropping M_PKTHDR, need to free m_tag associated with it.itojun
2003-10-03use in6_{embed,recover}scope for scoped address manipulationitojun
2003-10-02permit tunnel mode over link-local address. (outer header is link-local)itojun
2003-10-02handle link-local address in ipsec6_tunnel_validate(). from iij seli teamitojun
2003-09-22mark security policy that should persist in the system "persistent".itojun
2003-09-12remove extra blank lineitojun
2003-09-12make synchronization w/ PF tag support code easieritojun
2003-09-12make it possible to SADB_DUMP via sysctl. request by mrgitojun
2003-09-10record socket * associated with secpolicyitojun
2003-09-07- prepare for RFC2401bis 64bit sequence number (no behavior change yet)itojun
2003-09-06committed by mistake, sorryitojun
2003-09-06correct commentitojun
2003-09-06randomize IPv4/v6 fragment ID and IPv6 flowlabel. avoids predictabilityitojun
2003-08-22remove ipsec_set/getsocket. now we explicitly pass socket * to ip{,6}_output.itojun
2003-08-22allow userland to specify SPD ID. more readable debugging messages.itojun
2003-07-22unifdef -U_IP_VHLitojun
2003-05-10bring a small amount of code out of an if() statement that was doingdarrenr
2003-01-17switch from kame-based m_aux mbuf auxiliary data, to openbsd m_tagitojun
2002-09-27remove trailing \n in panic(). approved perry.provos
2002-09-11KNF - return is not a function. sync w/kame.itojun
2002-09-11correct signedness mixup in pointer passing. sync w/kameitojun
2002-08-14avoid swapping endian of ip_len and ip_off on mbuf, to meet with M_LEADINGSPACEitojun
2002-08-01typo. From: Arto Selonen <arto@selonen.org>, sync w/kameitojun
2002-07-18Spell 'should' correctly.wiz
2002-06-27reduce kernel stack usage by separating struct secasindex. sync w/kameitojun
2002-06-22move sanity check upwards. sync w/kameitojun
2002-06-22avoid listening socket from mistakenly use incorrect cached policy.itojun
2002-06-21sizeof mistake in DIAGNOSTIC path. sync w/kameitojun
2002-06-16previous commit cached pcb policy too much (when pcb points toitojun
2002-06-14cache pcb policy as much as possible. in fact, if policy is notitojun
2002-06-14remove redundant lineitojun
2002-06-13free secpolicy on deepcopy failureitojun
2002-06-12deep-copy pcb policy if it is an ipsec policy. assign ID field to allitojun
2002-06-12do not copy policy-on-socket at all. avoid copying packet header value toitojun
2002-06-11share policy-on-pcb for listening socket. sync w/kameitojun
2002-06-11avoid variable name confusion. sync w/kameitojun
2002-06-09whitespace cleanupitojun
2002-06-08whitespace cleanupitojun
2002-05-25re-enable ipsec policy caching onto pcb. refcnt fix and workarounds based on...itojun
2002-05-19in sp caching code, check if sp is still alive. sync w/kameitojun
2002-05-10disable ipsec policy caching on pcb, as it seems that there's some reference-itojun
2002-05-10remove unneeded #ifdef __FreeBSD__ portion.itojun
2002-04-28Use M_READONLY() rathern than testing to see if ext_free is setthorpej
2001-11-21update outgoing ifp, only if tunnel mode ipsec is used. this is toitojun
2001-11-13add RCSIDslukem
2001-10-29Don't need to include <uvm/uvm_extern.h> just to include <sys/sysctl.h>simonb
2001-10-16more whitespace/comment sync with kameitojun