summaryrefslogtreecommitdiff
path: root/sys/netkey
AgeCommit message (Expand)Author
2001-11-15don't need <sys/types.h> when including <sys/param.h>lukem
2001-11-13add RCSIDslukem
2001-10-29Don't need to include <uvm/uvm_extern.h> just to include <sys/sysctl.h>simonb
2001-10-19sync with kame:itojun
2001-09-24va_{start,end} audit:wiz
2001-09-16Spell 'occurred' with two 'r's.wiz
2001-08-16avoid symbol conflict with "sin()".itojun
2001-08-12remove "#ifdef IPSEC_DEBUG" conditional from from key_debug.hitojun
2001-08-12there is no KEY_DEBBUG. use IPSEC_DEBUGitojun
2001-08-06cache IPsec policy on in6?pcb. most of the lookup operations can be bypassed,itojun
2001-08-02pass replay sequence number on sadb_x_sa2 (it's outside of PF_KEY standarditojun
2001-08-02remove "register" variable specifier. sync with kameitojun
2001-07-27do not #ifdef KEY_DEBUG in header. sync with kameitojun
2001-06-04avoid assigning to policy_id twice. fixes more gcc 3.0 prerelease errors.mrg
2001-05-30use _KERNEL_OPTmrg
2001-04-06Negative exit code cleanup: Replace exit(-x) with exit(x).wiz
2001-02-21make some more constant arrays 'const'jdolecek
2001-02-16When processing an SADB_DELETE message, allow SADB_EXT_SA to bethorpej
2001-01-10if 2nd parameter of key_acquire() is NULL it panics.itojun
2000-10-07don't waste entropy by use of key_random(). use key_randomfill() foritojun
2000-10-05always use rnd(4) for IPsec random number source. avoid random(9).itojun
2000-10-02fix compilation without INET. fix confusion between ipsecstat and ipsec6stat.itojun
2000-09-26update ip compression algorithm lookup.itojun
2000-09-22use real wallclock (got by microtime) to compute IPsec database lifetimes.itojun
2000-09-22wake up socket even with socket recieve buffer is full. otherwise,itojun
2000-09-21suppress debugging message in key_acquire2(). this is purely for debugging,itojun
2000-09-20on SADB_UPDATE, check SPI range only for AH/ESP, not IPComp.itojun
2000-09-20repair SADB_ADD/UPDATE for ipcomp. no encryption key will be attached toitojun
2000-09-20make proposal/combination PF_KEY message on SADB_ACQUIRE optional, toitojun
2000-08-29use per-block cipher function + esp_cbc_{de,en}crypt. do not useitojun
2000-08-27make sure to stir ESP IV. pool allocator gives me almost constantitojun
2000-07-26remove #ifdef notdef part. sync with kame.itojun
2000-07-23pre-compute and cache intermediate crypto key. suggestion from sommerfeld,itojun
2000-07-18correct RFC2367 PF_KEY conformance (SADB_[AE]ALG_xx values and namespaces).itojun
2000-07-04move ipsec_{hex,bin}dump() into #ifdef wrapper.itojun
2000-07-01nuke sadb_x_ident_id, wihich violates pfkey standard.itojun
2000-06-28<vm/vm.h> -> <uvm/uvm_extern.h>mrg
2000-06-24Clean up some NULL vs. 0 confusion, and fix a bogus comparison.thorpej
2000-06-15correct compilation without IPSEC_ESP.itojun
2000-06-15correct ordering mistake in SADB_DUMP.itojun
2000-06-15correct port number matching (src/dst mixup).itojun
2000-06-14remove too strong assumption on mbuf length.itojun
2000-06-12sync with almost-latest KAME IPsec. full changelog would be too bigitojun
2000-06-04remove include files in nonstandard pathitojun
2000-05-19NULL != 0thorpej
2000-05-08Remove junk at the end of #undef.thorpej
2000-03-30Remove register declarations.augustss
2000-03-23New callout mechanism with two major improvements over the oldthorpej
2000-03-05correct IPsec SA lookup, so that we can always get/useitojun
2000-02-09for more strict rfc2367 conformance, move netkey/keyv2.h into net/pfkeyv2.hitojun