src/lib/libipsec/pfkey.c, branch release/5.3.0_cvs FreeBSD source tree This commit was manufactured by cvs2svn to create tag 2004-11-04T19:12:42+00:00 cvs2svn cvs2svn@FreeBSD.org 2004-11-04T19:12:42+00:00 3f86d8a2ea3f3265afaa1fd263b0004c5c000e69 'RELENG_5_3_0_RELEASE'. This commit was manufactured to restore the state of the 5.3-RELEASE image. 
'RELENG_5_3_0_RELEASE'.

This commit was manufactured to restore the state of the 5.3-RELEASE image.
Initial import of RFC 2385 (TCP-MD5) digest support. 2004-02-11T04:34:34+00:00 Bruce M Simpson bms@FreeBSD.org 2004-02-11T04:34:34+00:00 1922fd129e288c22e9c0175a84c13c33cb9345cb This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net 
This is the second of two commits; bring in the userland support to finish.

Teach libipsec and setkey about the tcp-md5 class of security associations,
thus allowing administrators to add per-host keys to the SADB for use by
the tcpsignature_compute() function.

Document that a single SPI must be used until such time as the code which
adds support to the SPD to specify flows for tcp-md5 treatment is suitable
for production.

Sponsored by:	sentex.net
- plug memory leak. 2003-11-05T09:41:23+00:00 Hajimu UMEMOTO ume@FreeBSD.org 2003-11-05T09:41:23+00:00 bd9f52d566a4e7d4881bc8df069dec2208235917 - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the change of the setkey syntax about a icmp6 type/code. - don't enumerate reserved fields. use memset. Obtained from: KAME 
- fixed a length of the sadb extension in the case of pfkey_send_x5().
- used getprotobynumber() for printing a upper layer protocol name.
- modified the output format against the change of the setkey syntax
  about a icmp6 type/code.
- don't enumerate reserved fields.  use memset.

Obtained from:	KAME
Remove multi-line __P() usage. 2002-03-22T09:22:15+00:00 David E. O'Brien obrien@FreeBSD.org 2002-03-22T09:22:15+00:00 1372519b1579b695b7c87b8fbbdc2c113e985474 






Remove __P() usage.
2002-03-21T23:54:04+00:00

David E. O'Brien
obrien@FreeBSD.org

2002-03-21T23:54:04+00:00

69160b1eb704d1931b536a65fcf50757ddbfc469












Add __FBSDID()s to libipsec
2001-09-30T21:43:45+00:00

Matthew Dillon
dillon@FreeBSD.org

2001-09-30T21:43:45+00:00

46a50f4e34d25717bfef8019dcc92ca31999130d












Sync with recent KAME.
2001-06-11T12:39:29+00:00

Hajimu UMEMOTO
ume@FreeBSD.org

2001-06-11T12:39:29+00:00

33841545909f4a4ee94aa148b3a9cbcdc1abb02a

This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.

TODO:
  - The definitions of SADB_* in sys/net/pfkeyv2.h are still different
    from RFC2407/IANA assignment because of binary compatibility
    issue.  It should be fixed under 5-CURRENT.
  - ip6po_m member of struct ip6_pktopts is no longer used.  But, it
    is still there because of binary compatibility issue.  It should
    be removed under 5-CURRENT.

Reviewed by:	itojun
Obtained from:	KAME
MFC after:	3 weeks





This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.

TODO:
  - The definitions of SADB_* in sys/net/pfkeyv2.h are still different
    from RFC2407/IANA assignment because of binary compatibility
    issue.  It should be fixed under 5-CURRENT.
  - ip6po_m member of struct ip6_pktopts is no longer used.  But, it
    is still there because of binary compatibility issue.  It should
    be removed under 5-CURRENT.

Reviewed by:	itojun
Obtained from:	KAME
MFC after:	3 weeks







synchronize with latest kame tree.
2000-07-04T16:22:05+00:00

Jun-ichiro itojun Hagino
itojun@FreeBSD.org

2000-07-04T16:22:05+00:00

3c62e87aa307c7566c1e7986655911494d813dc5

behavior change: policy syntax was changed.  you may need to update your
setkey(8) configuration files.





behavior change: policy syntax was changed.  you may need to update your
setkey(8) configuration files.







libipsec and IPsec related apps. (and some KAME related man pages)
2000-01-06T12:40:54+00:00

Yoshinobu Inoue
shin@FreeBSD.org

2000-01-06T12:40:54+00:00

9a4365d0e0833374e893c519639bde71756aa104

Reviewed by: freebsd-arch, cvs-committers
Obtained from: KAME project





Reviewed by: freebsd-arch, cvs-committers
Obtained from: KAME project