| Age | Commit message (Expand) | Author |
| 2006-09-02 | remove impossible comparison | christos |
| 2006-07-23 | Use the LWP cached credentials where sane. | ad |
| 2006-06-07 | merge FreeBSD timecounters from branch simonb-timecounters | kardel |
| 2006-01-25 | Make this compile without INET6. Spotted by Arto Selonen and Kurt | rpaulo |
| 2006-01-21 | Better support of IPv6 scoped addresses. | rpaulo |
| 2005-12-11 | merge ktrace-lwp. | christos |
| 2005-10-03 | Make sure that the port numbers are set to 0 in SAD and SPD when NAT-T | manu |
| 2005-07-03 | Another NAT-T fix: don't check for port information in transport mode, as there | manu |
| 2005-05-29 | - sprinkle const | christos |
| 2005-05-05 | Yet another NAT-T fix: don't forbid SP with ports in the policy | manu |
| 2005-04-25 | After more testing, it turns out that we don't really need to check the | manu |
| 2005-04-23 | Enhance IPSEC_NAT_T so that it can work with multiple machines behind the | manu |
| 2005-04-20 | Send NAT-T ports in SAD dump so that setkey -D can display them. | manu |
| 2005-02-26 | nuke trailing whitespace | perry |
| 2005-02-12 | Add support for IPsec Network Address Translator traversal (NAT-T), as | manu |
| 2005-01-11 | fixed a unexpected addr/port matching failure in SA management | itojun |
| 2004-12-06 | move SA header to DEAD if there's no children. markus@openbsd | itojun |
| 2004-12-06 | reqid (for unique policy) is u_int16_t quantity. from markus@openbsd | itojun |
| 2004-09-28 | m->m_next check here is not needed, since we make no assumption on m_len below, | itojun |
| 2004-08-27 | as we use arc4random(9) for random number, we no longer need to reseed random | itojun |
| 2004-08-03 | send error up when error happens during SADB_UPDATE. kame-pr-785 | itojun |
| 2004-05-31 | safer key_{spd,}dump. comment from yamt. | itojun |
| 2004-05-26 | dump/spddump can now handle tons of records. | itojun |
| 2004-05-10 | key_sp_unlink: decrement refcnt of the policy only if it was chained. | yamt |
| 2004-04-26 | fix key_mature for tcp md5 signature | itojun |
| 2004-04-26 | add missing "break" | itojun |
| 2004-04-26 | make TCP MD5 signature work with KAME IPSEC (#define IPSEC). | itojun |
| 2004-04-26 | Remove #else of #if __STDC__ | matt |
| 2004-04-12 | fixed a memory leak (refcnt) in #ifdef IPSEC_DOSEQCHECK portion | itojun |
| 2004-03-24 | Tango on sysctl_createv() and flags. The flags have all been renamed, | atatat |
| 2004-02-24 | occured -> occurred. From Peter Postma. | wiz |
| 2004-01-14 | invalidate pcb policy cache on key_timehandler(). part of | itojun |
| 2004-01-13 | secpolicy refcnt mistake (missing key_freesp). part of | itojun |
| 2003-12-10 | do not touch sav->xx after key_freesav(). from hajimu umemoto | itojun |
| 2003-12-04 | Dynamic sysctl. | atatat |
| 2003-11-27 | missing splx. Hajimu UMEMOTO via kame | itojun |
| 2003-11-11 | in_ifaddr -> in_ifaddrhead | drochner |
| 2003-11-10 | splsoftnet() on spd/sad-dump-via-sysctl to ensure no 2 threads to go into | itojun |
| 2003-11-04 | suppress -Wuninitialized | itojun |
| 2003-10-25 | fixed uninitialized variable | christos |
| 2003-10-13 | update m_pkthdr.len | itojun |
| 2003-09-22 | mark security policy that should persist in the system "persistent". | itojun |
| 2003-09-20 | unifdef -UFAST_IPSEC | itojun |
| 2003-09-14 | 2^n hash table is better in the kernel. advise by perry@netbsd | itojun |
| 2003-09-14 | use prime number to hash SPI | itojun |
| 2003-09-12 | no need for netipsec/key*, they are almost identical to netkey/key* | itojun |
| 2003-09-12 | make it possible to SADB_DUMP via sysctl. request by mrg | itojun |
| 2003-09-12 | kill unneeded variable | itojun |
| 2003-09-09 | correct hashed SPI lookup. reported by Greg Troxel | itojun |
| 2003-09-08 | add /kern/ipsecsa and /kern/ipsecsp, which can be inspected by setkey(8). | itojun |