summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2020-10-08Pull up following revision(s) (requested by knakahara in ticket #1103):martin
2020-03-13Pull up following revision(s) (requested by knakahara in ticket #780):martin
2020-01-31Pull up following revision(s) (requested by knakahara in ticket #679):martin
2019-11-14Pull up following revision(s) (requested by knakahara in ticket #423):martin
2019-09-24Pull up following revision(s) (requested by ozaki-r in ticket #238):martin
2019-09-01Pull up following revision(s) (requested by maxv in ticket #127):martin
2019-07-23ipsec: fix a regression of the update APIozaki-r
2019-07-17Avoid a race condition between SA (sav) manipulationsozaki-r
2019-07-09Fix uninitialized variable: in ipsec_checkpcbcache(), spidx.dir is notmaxv
2019-06-12make DPRINTF use varyadic cpp macros, and merge with IPSECLOG.christos
2019-06-12fix typo in comment, improve error message, add default case handling tochristos
2019-06-12Fix double free: key_setsaval() free's newsav by calling key_freesaval()christos
2019-05-17Don't clear calculated Tx tos value for IPv[46] over IPv6.knakahara
2019-04-12remove a variable which is no longer used.knakahara
2019-03-18 s/pakcet/packet/ in comment.msaitoh
2019-02-26Fix locking: it is fine if the lock is already key_so_mtx, this can happenmaxv
2019-01-27Merge the [pgoyette-compat] branchpgoyette
2019-01-17Fix ipsecif(4) cannot apply input direction packet filter. Reviewed by ozaki-...knakahara
2018-12-26ipsecif(4) supports multiple peers in the same NAPT.knakahara
2018-12-26Remove unnecessary addresses in PF_KEY message.knakahara
2018-12-24Remove unused function.maxv
2018-12-22Replace M_ALIGN and MH_ALIGN by m_align.maxv
2018-12-22Replace: M_MOVE_PKTHDR -> m_move_pkthdr. No functional change, since themaxv
2018-12-07ipsecif(4) should not increment drop counter by errors not related to if_snd....knakahara
2018-11-22Support IPv6 NAT-T. Implemented by hsuenaga@IIJ and ohishi@IIJ.knakahara
2018-11-15Remove the 't' argument from m_tag_find().maxv
2018-11-08Don't call soroverflow when we return the error to the sender.roy
2018-10-27Localify one function, and switch to C99 types while here.maxv
2018-09-14Use non-variadic function pointer in protosw::pr_input.maxv
2018-09-03Rename min/max -> uimin/uimax for better honesty.riastradh
2018-08-23Don't call key_ismyaddr, which may sleep, in a pserialize read sectionozaki-r
2018-08-22- Cleanup for dynamic sysctl:msaitoh
2018-07-11Renamemaxv
2018-07-04merge duplicated code, more informative debugging.christos
2018-05-31Clarify, remove superfluous things.maxv
2018-05-31Adapt rev1.75, suggested by Alexander Bluhm. Relax the checks to allowmaxv
2018-05-31Remove support for non-IKE markers in the kernel. Discussed on tech-net@,maxv
2018-05-31Constify ipseczeroes, and remove one use of it.maxv
2018-05-31Add a comment and a KASSERT. I remember wondering whether this check was amaxv
2018-05-31stylemaxv
2018-05-30Correctly handle the padding for IPv6-AH, as specified by RFC4302. Seen inmaxv
2018-05-30Introduce ah_authsiz, which computes the length of the ICV only. Use it inmaxv
2018-05-30Apply the previous change in esp_input too, same as esp_output.maxv
2018-05-30Remove dead code, 'espx' is never NULL and dereferenced earlier, so no needmaxv
2018-05-30Simplify the padding computation. Until now 'padlen' contained the ESPmaxv
2018-05-30Rename padding -> padlen, pad -> tail, and clarify.maxv
2018-05-29Strengthen and simplify, once more.maxv
2018-05-29Fix non-INET6 buildsozaki-r
2018-05-18IP6_EXTHDR_GET -> M_REGION_GET, no functional change.maxv
2018-05-14Merge ipsec4_input and ipsec6_input into ipsec_ip_input. Make the argumentmaxv