summaryrefslogtreecommitdiff
path: root/sys/netkey/key.c
AgeCommit message (Expand)Author
2006-09-02remove impossible comparisonchristos
2006-07-23Use the LWP cached credentials where sane.ad
2006-06-07merge FreeBSD timecounters from branch simonb-timecounterskardel
2006-01-25Make this compile without INET6. Spotted by Arto Selonen and Kurtrpaulo
2006-01-21Better support of IPv6 scoped addresses.rpaulo
2005-12-11merge ktrace-lwp.christos
2005-10-03Make sure that the port numbers are set to 0 in SAD and SPD when NAT-Tmanu
2005-07-03Another NAT-T fix: don't check for port information in transport mode, as theremanu
2005-05-29- sprinkle constchristos
2005-05-05Yet another NAT-T fix: don't forbid SP with ports in the policymanu
2005-04-25After more testing, it turns out that we don't really need to check themanu
2005-04-23Enhance IPSEC_NAT_T so that it can work with multiple machines behind themanu
2005-04-20Send NAT-T ports in SAD dump so that setkey -D can display them.manu
2005-02-26nuke trailing whitespaceperry
2005-02-12Add support for IPsec Network Address Translator traversal (NAT-T), asmanu
2005-01-11fixed a unexpected addr/port matching failure in SA managementitojun
2004-12-06move SA header to DEAD if there's no children. markus@openbsditojun
2004-12-06reqid (for unique policy) is u_int16_t quantity. from markus@openbsditojun
2004-09-28m->m_next check here is not needed, since we make no assumption on m_len below,itojun
2004-08-27as we use arc4random(9) for random number, we no longer need to reseed randomitojun
2004-08-03send error up when error happens during SADB_UPDATE. kame-pr-785itojun
2004-05-31safer key_{spd,}dump. comment from yamt.itojun
2004-05-26dump/spddump can now handle tons of records.itojun
2004-05-10key_sp_unlink: decrement refcnt of the policy only if it was chained.yamt
2004-04-26fix key_mature for tcp md5 signatureitojun
2004-04-26add missing "break"itojun
2004-04-26make TCP MD5 signature work with KAME IPSEC (#define IPSEC).itojun
2004-04-26Remove #else of #if __STDC__matt
2004-04-12fixed a memory leak (refcnt) in #ifdef IPSEC_DOSEQCHECK portionitojun
2004-03-24Tango on sysctl_createv() and flags. The flags have all been renamed,atatat
2004-02-24occured -> occurred. From Peter Postma.wiz
2004-01-14invalidate pcb policy cache on key_timehandler(). part ofitojun
2004-01-13secpolicy refcnt mistake (missing key_freesp). part ofitojun
2003-12-10do not touch sav->xx after key_freesav(). from hajimu umemotoitojun
2003-12-04Dynamic sysctl.atatat
2003-11-27missing splx. Hajimu UMEMOTO via kameitojun
2003-11-11in_ifaddr -> in_ifaddrheaddrochner
2003-11-10splsoftnet() on spd/sad-dump-via-sysctl to ensure no 2 threads to go intoitojun
2003-11-04suppress -Wuninitializeditojun
2003-10-25fixed uninitialized variablechristos
2003-10-13update m_pkthdr.lenitojun
2003-09-22mark security policy that should persist in the system "persistent".itojun
2003-09-20unifdef -UFAST_IPSECitojun
2003-09-142^n hash table is better in the kernel. advise by perry@netbsditojun
2003-09-14use prime number to hash SPIitojun
2003-09-12no need for netipsec/key*, they are almost identical to netkey/key*itojun
2003-09-12make it possible to SADB_DUMP via sysctl. request by mrgitojun
2003-09-12kill unneeded variableitojun
2003-09-09correct hashed SPI lookup. reported by Greg Troxelitojun
2003-09-08add /kern/ipsecsa and /kern/ipsecsp, which can be inspected by setkey(8).itojun