summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2007-05-08Always compute the sp index even if we don't have any sp in spd. It willdegroote
2007-05-08Increase the refcount for the default ipv6 policy so nobody can reclaim itdegroote
2007-04-15Choose the good default policy, depending of the adress family of thedegroote
2007-04-11Add sysctl tree to modify the fast_ipsec options related to ipv6. Similardegroote
2007-04-11When we construct an answer for SADB_X_SPDGET, don't use an hardcoded 0 for s...degroote
2007-04-11In spddelete2, if we can't find the sp by this id, return after sending an er...degroote
2007-04-09Fix a memleak in key_spdget.degroote
2007-03-25Honor the ip4_ah_offsetmask bits (clear or not the ip->ip_off field for ahdegroote
2007-03-25Use ip4_ah_cleartos instead of ah_cleartos for consistencydegroote
2007-03-25Make an exact match when we are looking for a cached sp for an unconnecteddegroote
2007-03-21Call key_checkspidup with spi in network bit order in order to make correctdegroote
2007-03-09Allow to build without INET6liamjfoy
2007-03-07Add IPv6 Fast Forward:liamjfoy
2007-03-04Remove useless castdegroote
2007-03-04Fix fallout from caddr_t changesdegroote
2007-03-04Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.christos
2007-02-23Oops, I forgot to commit some bits last timedegroote
2007-02-18Always free the sav, not only in the mature casedegroote
2007-02-18Fix the {ah,esp}4_ctlinput codedegroote
2007-02-18Forgot to remove two useless externdegroote
2007-02-18Constify the code following the dyoung change ( the "bug" was hidden by thedegroote
2007-02-18Remove __Pdegroote
2007-02-17KNF: de-__P, bzero -> memset, bcmp -> memcmp. Remove extraneousdyoung
2007-02-11fixed a unexpected addr/port matching failure in SA managementdegroote
2007-02-11reqid (for unique policy) is u_int16_t quantity.degroote
2007-02-10Commit my SoC workdegroote
2007-01-26KNF: bzero -> memset.dyoung
2006-12-15Introduce new helper functions to abstract the route caching.joerg
2006-12-09Here are various changes designed to protect against bad IPv4dyoung
2006-11-24fix spelling of accommodate; from Zapher.christos
2006-11-16__unused removal on arguments; approved by core.christos
2006-10-13more __unusedchristos
2006-08-31Make this compile again (hi xtos!). Switch to C99 structure initializations.matt
2006-07-23Use the LWP cached credentials where sane.ad
2006-06-10clarify time scale semantic issuekardel
2006-06-10reference time.tv_sec in non timecounter casekardel
2006-06-10fix a missing conversion for a mono_time reference.kardel
2006-06-07merge FreeBSD timecounters from branch simonb-timecounterskardel
2006-05-14integrate kauth.elad
2006-04-28The esp_input_cb function used m_copyback, which fails if the mbuf ispavel
2006-04-11Add two new sysctls protected under IPSEC_DEBUG:rpaulo
2006-03-23FreeBSD SA-06:11 and CVE-2006-0905: update the replay sequence numberrpaulo
2006-02-25Fix some typos.wiz
2006-02-16Change "inline" back to "__inline" in .h files -- C99 is still tooperry
2005-12-24Remove leading __ from __(const|inline|signed|volatile) -- it is obsolete.perry
2005-12-11merge ktrace-lwp.christos
2005-12-10Multiple inclusion protection, as suggested by christos@ on tech-kern@elad
2005-12-04Merge the 3 copies of m_getcl() so that fast ipsec compiles again togetherchristos
2005-10-05PR/31478: YOMURA Masanori: Inconsistent default value of net.inet.ipsec.dfbitchristos
2005-08-18- introduce M_MOVE_PKTHDR and use it where appropriate.yamt