summaryrefslogtreecommitdiff
path: root/sys/netkey
AgeCommit message (Expand)Author
2006-09-02use c99 initializerschristos
2006-09-02add missing initializerschristos
2006-09-02remove impossible comparisonchristos
2006-08-28remove excess initializerchristos
2006-07-23Use the LWP cached credentials where sane.ad
2006-06-07merge FreeBSD timecounters from branch simonb-timecounterskardel
2006-01-25Make this compile without INET6. Spotted by Arto Selonen and Kurtrpaulo
2006-01-21Better support of IPv6 scoped addresses.rpaulo
2005-12-11merge ktrace-lwp.christos
2005-12-11Multiple inclusion protection, as suggested by christos@ on tech-kern@elad
2005-10-03Make sure that the port numbers are set to 0 in SAD and SPD when NAT-Tmanu
2005-07-07Defopt IPSEC_NAT_T.tron
2005-07-03Another NAT-T fix: don't check for port information in transport mode, as theremanu
2005-05-29- sprinkle constchristos
2005-05-05Yet another NAT-T fix: don't forbid SP with ports in the policymanu
2005-04-25After more testing, it turns out that we don't really need to check themanu
2005-04-23Enhance IPSEC_NAT_T so that it can work with multiple machines behind themanu
2005-04-20Send NAT-T ports in SAD dump so that setkey -D can display them.manu
2005-02-26nuke trailing whitespaceperry
2005-02-12Add support for IPsec Network Address Translator traversal (NAT-T), asmanu
2005-01-23Change initialzie of domains to use link sets. Switch to using STAILQ.matt
2005-01-11fixed a unexpected addr/port matching failure in SA managementitojun
2004-12-06move SA header to DEAD if there's no children. markus@openbsditojun
2004-12-06reqid (for unique policy) is u_int16_t quantity. from markus@openbsditojun
2004-10-30Use unsigned char * variables when scanning buffer - saves casts and & 0xffdsl
2004-10-29Add (unsigned char) cast to ctype function (for /sbin/setkey)dsl
2004-09-28m->m_next check here is not needed, since we make no assumption on m_len below,itojun
2004-08-27as we use arc4random(9) for random number, we no longer need to reseed randomitojun
2004-08-03send error up when error happens during SADB_UPDATE. kame-pr-785itojun
2004-07-24key_sendup0: prepend a promisc header only for a mbuf given as a function arg.yamt
2004-07-24key_receive: pull packets from kp_queue.yamt
2004-07-08key_sendup0: add a missing sorwakeup().yamt
2004-06-01avoid null pointer derefitojun
2004-06-01recover kp_queue properly. yamtitojun
2004-05-31correct kp_queue handling. yamtitojun
2004-05-31need to fix kp_queue better...itojun
2004-05-31on EAGAIN, set kp_queue again for the next wakeup. pointed out by yamtitojun
2004-05-31safer key_{spd,}dump. comment from yamt.itojun
2004-05-26dump/spddump can now handle tons of records.itojun
2004-05-10key_sp_unlink: decrement refcnt of the policy only if it was chained.yamt
2004-04-26fix key_mature for tcp md5 signatureitojun
2004-04-26add missing "break"itojun
2004-04-26make TCP MD5 signature work with KAME IPSEC (#define IPSEC).itojun
2004-04-26Remove #else of #if __STDC__matt
2004-04-22Constify protosw arrays. This can reduce the kernel .data section bymatt
2004-04-18Use M_ZERO appropriately.matt
2004-04-12fixed a memory leak (refcnt) in #ifdef IPSEC_DOSEQCHECK portionitojun
2004-03-24Tango on sysctl_createv() and flags. The flags have all been renamed,atatat
2004-02-24occured -> occurred. From Peter Postma.wiz
2004-01-14invalidate pcb policy cache on key_timehandler(). part ofitojun