summaryrefslogtreecommitdiff
path: root/sys/netkey
AgeCommit message (Expand)Author
2008-07-27Change how 'while (0)' is commented out to avoid /* within a comment.dsl
2008-07-25Comment out the 'do' and 'while (0)' from KEY_CHKSASTATE().dsl
2008-07-01Ignore freed rtcache entries.mlelstv
2008-05-04Simplify the interface to netstat_sysctl() and allocate space forthorpej
2008-04-28Remove clause 3 and 4 from TNF licensesmartin
2008-04-28key_usrreq: set in a lock on PRU_ATTACH. Spotted by yamt@.ad
2008-04-24Merge the socket locking patch:ad
2008-04-23PF_KEY stats for IPSEC and FAST_IPSEC are now per-CPU.thorpej
2008-01-13s/DIGAGNOSTIC/DIAGNOSTIC/msaitoh
2007-12-07Use struct initializers. No functional change.elad
2007-07-09Merge some of the less invasive changes from the vmlocking branch:ad
2007-05-02Eliminate address family-specific route caches (struct route, structdyoung
2007-04-11When we construct an answer for SADB_X_SPDGET, don't use an hardcoded 0 for s...degroote
2007-03-21Call key_checkspidup with spi in network bit order in order to make correctdegroote
2007-03-04Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.christos
2007-02-17KNF: de-__P, bzero -> memset, bcmp -> memcmp. Remove extraneousdyoung
2007-01-24Remove duplicate #includes, patch contributed in private mailhubertf
2006-12-15Introduce new helper functions to abstract the route caching.joerg
2006-12-10Remove a superfluous cast.he
2006-12-09Fix misplaced ampersand. Noticed by Greg Troxel.dyoung
2006-12-09Here are various changes designed to protect against bad IPv4dyoung
2006-11-16__unused removal on arguments; approved by core.christos
2006-10-14Fix argument ordersmb
2006-10-14more __unusedchristos
2006-10-12- sprinkle __unused on function decls.christos
2006-09-02use c99 initializerschristos
2006-09-02add missing initializerschristos
2006-09-02remove impossible comparisonchristos
2006-08-28remove excess initializerchristos
2006-07-23Use the LWP cached credentials where sane.ad
2006-06-07merge FreeBSD timecounters from branch simonb-timecounterskardel
2006-01-25Make this compile without INET6. Spotted by Arto Selonen and Kurtrpaulo
2006-01-21Better support of IPv6 scoped addresses.rpaulo
2005-12-11merge ktrace-lwp.christos
2005-12-11Multiple inclusion protection, as suggested by christos@ on tech-kern@elad
2005-10-03Make sure that the port numbers are set to 0 in SAD and SPD when NAT-Tmanu
2005-07-07Defopt IPSEC_NAT_T.tron
2005-07-03Another NAT-T fix: don't check for port information in transport mode, as theremanu
2005-05-29- sprinkle constchristos
2005-05-05Yet another NAT-T fix: don't forbid SP with ports in the policymanu
2005-04-25After more testing, it turns out that we don't really need to check themanu
2005-04-23Enhance IPSEC_NAT_T so that it can work with multiple machines behind themanu
2005-04-20Send NAT-T ports in SAD dump so that setkey -D can display them.manu
2005-02-26nuke trailing whitespaceperry
2005-02-12Add support for IPsec Network Address Translator traversal (NAT-T), asmanu
2005-01-23Change initialzie of domains to use link sets. Switch to using STAILQ.matt
2005-01-11fixed a unexpected addr/port matching failure in SA managementitojun
2004-12-06move SA header to DEAD if there's no children. markus@openbsditojun
2004-12-06reqid (for unique policy) is u_int16_t quantity. from markus@openbsditojun
2004-10-30Use unsigned char * variables when scanning buffer - saves casts and & 0xffdsl