| Age | Commit message (Expand) | Author |
| 2022-05-22 | opencrypto: crypto_dispatch never fails now. Make it return void. | riastradh |
| 2022-05-22 | opencrypto: Rip out EAGAIN logic when unregistering crypto drivers. | riastradh |
| 2022-05-22 | opencrypto: Make crypto_freesession return void. | riastradh |
| 2022-05-22 | netipsec: Nothing uses xf_zeroize return value. Nix it. | riastradh |
| 2022-05-22 | opencrypto: Make crp_callback, krp_callback return void. | riastradh |
| 2019-11-01 | Fix ipsecif(4) IPV6_MINMTU does not work correctly. | knakahara |
| 2019-06-12 | make DPRINTF use varyadic cpp macros, and merge with IPSECLOG. | christos |
| 2019-01-27 | Merge the [pgoyette-compat] branch | pgoyette |
| 2018-05-31 | Constify ipseczeroes, and remove one use of it. | maxv |
| 2018-05-30 | Correctly handle the padding for IPv6-AH, as specified by RFC4302. Seen in | maxv |
| 2018-05-30 | Introduce ah_authsiz, which computes the length of the ICV only. Use it in | maxv |
| 2018-05-29 | Strengthen and simplify, once more. | maxv |
| 2018-05-29 | Fix non-INET6 builds | ozaki-r |
| 2018-05-18 | IP6_EXTHDR_GET -> M_REGION_GET, no functional change. | maxv |
| 2018-05-13 | Remove unused calls to nat_t_ports_get. | maxv |
| 2018-05-11 | ENOBUFS -> EACCES when updating the replay counter. | maxv |
| 2018-05-07 | Remove unused 'mp' argument from all the xf_output functions. Also clean | maxv |
| 2018-05-01 | When IP6_EXTHDR_GET fails, return ENOBUFS, and don't log an error (HDROPS | maxv |
| 2018-05-01 | When the replay check fails, return EACCES instead of ENOBUFS. | maxv |
| 2018-04-28 | Remove IPSEC_SPLASSERT_SOFTNET, it has always been a no-op. | maxv |
| 2018-04-24 | Remove the M_AUTHIPDGM flag. It is equivalent to M_AUTHIPHDR, both | maxv |
| 2018-04-23 | Remove the kernel RH0 code. RH0 is deprecated by RFC5095, for security | maxv |
| 2018-04-19 | Remove extra long file paths from the headers. | maxv |
| 2018-04-19 | cosmetic | maxv |
| 2018-04-18 | Simplify the IPv4 parser. Get the option length in 'optlen', and sanitize | maxv |
| 2018-04-16 | Remove dead code. | maxv |
| 2018-04-13 | Remove duplicate, to better show that this place doesn't make a lot of | maxv |
| 2018-02-26 | Reinforce this area, make sure the length field fits the option. Normally | maxv |
| 2018-02-16 | Add [ah/esp/ipcomp]_enable sysctls, and remove the FreeBSD #ifdefs. | maxv |
| 2018-02-16 | Remove some more FreeBSD sysctl declarations that already have NetBSD | maxv |
| 2018-02-15 | Fix buffer overflow on sending an IPv6 packet with large options | ozaki-r |
| 2018-02-15 | Commonalize error paths (NFC) | ozaki-r |
| 2018-02-15 | style | maxv |
| 2018-02-15 | Make sure the Authentication Header fits the mbuf chain, otherwise panic. | maxv |
| 2018-02-15 | Fix use-after-free, 'ah' may not be valid after m_makewritable and | maxv |
| 2018-02-15 | Fix kernel panic (assertion failure) on receiving an IPv6 packet with large o... | ozaki-r |
| 2018-02-15 | Don't relook up an SP/SA in opencrpyto callbacks | ozaki-r |
| 2018-01-24 | Reinforce and clarify. | maxv |
| 2018-01-24 | Fix a vulnerability in IPsec-IPv6-AH, that allows an attacker to remotely | maxv |
| 2018-01-24 | Revert a part of rev1.49 (six months ago). The pointer given to memcpy | maxv |
| 2017-10-03 | Constify isr at many places (NFC) | ozaki-r |
| 2017-08-10 | Use pool_cache(9) instead of pool(9) for tdb_crypto objects | ozaki-r |
| 2017-08-09 | MP-ify SAD (savlist) | ozaki-r |
| 2017-08-03 | Introduce KEY_SA_UNREF and replace KEY_FREESAV with it where sav will never b... | ozaki-r |
| 2017-08-02 | Make IPsec SPD MP-safe | ozaki-r |
| 2017-07-27 | Don't acquire global locks for IPsec if NET_MPSAFE | ozaki-r |
| 2017-07-20 | Use pool to allocate tdb_crypto | ozaki-r |
| 2017-07-20 | Dedup error paths (NFC) | ozaki-r |
| 2017-07-20 | Fix a debug message | ozaki-r |
| 2017-07-19 | Hold a reference to an SP during opencrypto processing | ozaki-r |