summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2023-01-27ipsec: remove unnecessary splsoftnetozaki-r
2022-12-08Fix: sp->lastused should be updated by time_uptime, and refactor a little.knakahara
2022-12-08Fix: update lastused of ipsecif(4) IPv6 out SP.knakahara
2022-12-07gif(4), ipsec(4) and l2tp(4) use encap_attach_addr().knakahara
2022-11-09Fix IPv4 security policy with port number does not work for forwarding packets.knakahara
2022-11-04inpcb: rename functions to inpcb_*ozaki-r
2022-10-28Remove in_pcb_hdr.hozaki-r
2022-10-28inpcb: integrate data structures of PCB into oneozaki-r
2022-10-19PR/56836: Andrew Cagney: IPv6 ESN tunneling IPcomp has corrupt headerchristos
2022-10-11Add sadb_x_policy_flags to inform SP origination.knakahara
2022-09-02Remove unnecessary inclusion of <net/netisr.h>.thorpej
2022-08-23Improve IPsec log when no key association found for SA. Implemented by ohish...knakahara
2022-08-09Add sysctl entry to improve interconnectivity to some VPN appliances, pointed...knakahara
2022-05-25ipsec: don't assert for the format of incoming packetsozaki-r
2022-05-24fix various typos in comment, documentation and log messages.andvar
2022-05-22opencrypto: crypto_dispatch never fails now. Make it return void.riastradh
2022-05-22opencrypto: Rip out EAGAIN logic when unregistering crypto drivers.riastradh
2022-05-22opencrypto: Make crypto_freesession return void.riastradh
2022-05-22netipsec: Nothing uses xf_zeroize return value. Nix it.riastradh
2022-05-22opencrypto: Make crp_callback, krp_callback return void.riastradh
2022-05-19PR/56840: Andrew Cagney: use the proper polarity hton/ntoh macros (nochristos
2022-05-18PR/56841: Andrew Cagney: debug-log IPcomp CPI lookups:christos
2022-04-10fix various typos in comments and output/log messages.andvar
2022-02-13fix few typos in comments and log message.andvar
2022-01-02fix few more typos in comments.andvar
2021-12-08s/speficication/specification/andvar
2021-12-03fix various typos in comments, log messages and documentation.andvar
2021-11-10s/assocciation/association/ in comment.msaitoh
2021-08-09fix various typos in compatibility, mainly in comments.andvar
2020-10-05Make sequence number of esp header MP-safe for IPsec Tx side. reviewed by oza...knakahara
2020-08-28ipsec: rename ipsec_ip_input to ipsec_ip_input_checkpolicyozaki-r
2020-08-28inet, inet6: count packets dropped by IPsecozaki-r
2020-06-30Rename enc_xform_rijndael128 -> enc_xform_aes.riastradh
2020-04-22Make crypto/rijindael optional again as cprng_strong does no longerrin
2020-03-13Fix kern/55066. Pointed out and fixed by Chuck Zmudzinski, thanks.knakahara
2020-02-07Use percpu_foreach_xcall() to gather volatile per-cpu counters. Thesethorpej
2020-01-31Fix IPv6 over IPv4 ipsecif(4) uses IPv4 SP wrongly. Pointed out by ohishi@IIJ.knakahara
2019-11-14Reduce load for IKE negotiations when the system has many IPv6 addresses.knakahara
2019-11-12Fix SA can be expaired wrongly when there are many SPs.knakahara
2019-11-01Make global and per-interface ipsecif(4) pmtu tunable like gif(4).knakahara
2019-11-01Fix ipsecif(4) IPV6_MINMTU does not work correctly.knakahara
2019-09-25Make panic messages more informativeozaki-r
2019-09-19Avoid having a rtcache directly in a percpu storage for tunnel protocols.knakahara
2019-09-19Avoid having a rtcache directly in a percpu storageozaki-r
2019-08-07ipsec_getpolicybysock() should also call key_havesp() like ipsec_getpolicybya...knakahara
2019-08-04Fix info leaks.maxv
2019-07-23ipsec: fix a regression of the update APIozaki-r
2019-07-17Avoid a race condition between SA (sav) manipulationsozaki-r
2019-07-09Fix uninitialized variable: in ipsec_checkpcbcache(), spidx.dir is notmaxv
2019-06-12make DPRINTF use varyadic cpp macros, and merge with IPSECLOG.christos