summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2014-03-01Remove modification of an unused uninitialized variable.joerg
2014-02-25Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist beforepooka
2013-12-24fix debugging output printfs to use __func__ so they print the correct names.christos
2013-12-24fix a typo in the log ouput of ipsec4_get_policydegroote
2013-11-03- apply some __diagusedmrg
2013-09-19make debugging code use __func__christos
2013-08-28Fix sense of consttime_memequal and update all callers.riastradh
2013-06-24Replace consttime_bcmp/explicit_bzero by consttime_memequal/explicit_memset.riastradh
2013-06-11remove the last vestiges of fast_ipsecchristos
2013-06-08Split IPsec code in ip_input() and ip_forward() into the separate routinesrmind
2013-06-08Split IPSec logic from ip_output() into a separate routine - ipsec4_output().rmind
2013-06-05IPSEC has not come in two speeds for a long time now (IPSEC == kame,christos
2013-06-04PR/47886: Dr. Wolfgang Stukenbrock: IPSEC_NAT_T enabled kernels may accesschristos
2013-05-09Fix FAST_IPSEC locking violation.gdt
2012-12-07rename pcb_sp to policy to avoid:christos
2012-09-20Fix whitespace (mostly removing trailing).gdt
2012-08-30Add "consttime_bcmp" and "explicit_bzero" functions for both kerneldrochner
2012-08-29g/c unused struct memberdrochner
2012-06-02Add some pre-processor magic to verify that the type of the data itemdsl
2012-03-22remove KAME IPSEC, replaced by FAST_IPSECdrochner
2012-03-13Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls withelad
2012-01-26remove some DPRINTFs which are not just diagnostics but cause noisedrochner
2012-01-25After IPSEC input processing, pass a decoded/authenticated IPv4 packetdrochner
2012-01-25Make sure the mbufs in the input path (only the parts which we are goingdrochner
2012-01-24fix pointer/offset mistakes in handling of IPv4 optionsdrochner
2012-01-11fix build in the (FAST_)IPSEC & TCP_SIGNATURE casedrochner
2012-01-11protect "union sockaddr_union" from being defined twice by a CPP symboldrochner
2012-01-10add patch from Arnaud Degroote to handle IPv6 extended options withdrochner
2012-01-09allow the ESP fragment length in the NAT-T case to be reported backdrochner
2012-01-09Make FAST_IPSEC the default IPSEC implementation which is builtdrochner
2012-01-06more IPSEC header cleanup: don't install unneeded headers to userland,drochner
2012-01-04include <netipsec/ipsec.h> rather than <netinet6/ipsec.h> from userlanddrochner
2012-01-04-consistently use "char *" for the compiled policy buffer in thedrochner
2011-12-19rename the IPSEC in-kernel CPP variable and config(8) option todrochner
2011-12-19as in netkey/key.c, just use cprng_fast() to get a random numberdrochner
2011-11-29add missing rnd_extract->cprng_fast conversion, fixes build ofdrochner
2011-08-31NULL does not need a castplunky
2011-07-17Retire varargs.h support. Move machine/stdarg.h logic into MIjoerg
2011-06-09catch a case where an ip6 address with scope embedded was compared withdrochner
2011-06-09more "const"drochner
2011-06-08Fiddle a bit with const's to make FAST_IPSEC compile.dyoung
2011-06-07fix tunnel encapsulation in ipsec6_process_packet() -- it is notdrochner
2011-06-07reindent ipsec6_process_packet() - whitespace changes onlydrochner
2011-06-06remove a limitation that inner and outer IP version must be equaldrochner
2011-06-05more malloc style.christos
2011-06-05- sprinkle constchristos
2011-05-26pull in AES-GCM/GMAC support from OpenBSDdrochner
2011-05-24copy AES-XCBC-MAC support from KAME IPSEC to FAST_IPSECdrochner
2011-05-23g/c remainders of IV handling in pfkey code -- this is done indrochner
2011-05-23allow ESP to use AES-CTRdrochner