summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2021-12-08s/speficication/specification/andvar
2021-12-03fix various typos in comments, log messages and documentation.andvar
2021-11-10s/assocciation/association/ in comment.msaitoh
2021-08-09fix various typos in compatibility, mainly in comments.andvar
2020-10-05Make sequence number of esp header MP-safe for IPsec Tx side. reviewed by oza...knakahara
2020-08-28ipsec: rename ipsec_ip_input to ipsec_ip_input_checkpolicyozaki-r
2020-08-28inet, inet6: count packets dropped by IPsecozaki-r
2020-06-30Rename enc_xform_rijndael128 -> enc_xform_aes.riastradh
2020-04-22Make crypto/rijindael optional again as cprng_strong does no longerrin
2020-03-13Fix kern/55066. Pointed out and fixed by Chuck Zmudzinski, thanks.knakahara
2020-02-07Use percpu_foreach_xcall() to gather volatile per-cpu counters. Thesethorpej
2020-01-31Fix IPv6 over IPv4 ipsecif(4) uses IPv4 SP wrongly. Pointed out by ohishi@IIJ.knakahara
2019-11-14Reduce load for IKE negotiations when the system has many IPv6 addresses.knakahara
2019-11-12Fix SA can be expaired wrongly when there are many SPs.knakahara
2019-11-01Make global and per-interface ipsecif(4) pmtu tunable like gif(4).knakahara
2019-11-01Fix ipsecif(4) IPV6_MINMTU does not work correctly.knakahara
2019-09-25Make panic messages more informativeozaki-r
2019-09-19Avoid having a rtcache directly in a percpu storage for tunnel protocols.knakahara
2019-09-19Avoid having a rtcache directly in a percpu storageozaki-r
2019-08-07ipsec_getpolicybysock() should also call key_havesp() like ipsec_getpolicybya...knakahara
2019-08-04Fix info leaks.maxv
2019-07-23ipsec: fix a regression of the update APIozaki-r
2019-07-17Avoid a race condition between SA (sav) manipulationsozaki-r
2019-07-09Fix uninitialized variable: in ipsec_checkpcbcache(), spidx.dir is notmaxv
2019-06-12make DPRINTF use varyadic cpp macros, and merge with IPSECLOG.christos
2019-06-12fix typo in comment, improve error message, add default case handling tochristos
2019-06-12Fix double free: key_setsaval() free's newsav by calling key_freesaval()christos
2019-05-17Don't clear calculated Tx tos value for IPv[46] over IPv6.knakahara
2019-04-12remove a variable which is no longer used.knakahara
2019-03-18 s/pakcet/packet/ in comment.msaitoh
2019-02-26Fix locking: it is fine if the lock is already key_so_mtx, this can happenmaxv
2019-01-27Merge the [pgoyette-compat] branchpgoyette
2019-01-17Fix ipsecif(4) cannot apply input direction packet filter. Reviewed by ozaki-...knakahara
2018-12-26ipsecif(4) supports multiple peers in the same NAPT.knakahara
2018-12-26Remove unnecessary addresses in PF_KEY message.knakahara
2018-12-24Remove unused function.maxv
2018-12-22Replace M_ALIGN and MH_ALIGN by m_align.maxv
2018-12-22Replace: M_MOVE_PKTHDR -> m_move_pkthdr. No functional change, since themaxv
2018-12-07ipsecif(4) should not increment drop counter by errors not related to if_snd....knakahara
2018-11-22Support IPv6 NAT-T. Implemented by hsuenaga@IIJ and ohishi@IIJ.knakahara
2018-11-15Remove the 't' argument from m_tag_find().maxv
2018-11-08Don't call soroverflow when we return the error to the sender.roy
2018-10-27Localify one function, and switch to C99 types while here.maxv
2018-09-14Use non-variadic function pointer in protosw::pr_input.maxv
2018-09-03Rename min/max -> uimin/uimax for better honesty.riastradh
2018-08-23Don't call key_ismyaddr, which may sleep, in a pserialize read sectionozaki-r
2018-08-22- Cleanup for dynamic sysctl:msaitoh
2018-07-11Renamemaxv
2018-07-04merge duplicated code, more informative debugging.christos
2018-05-31Clarify, remove superfluous things.maxv