src/lib/libipsec/pfkey_dump.c, branch release/6.0.0_cvs

This commit was manufactured by cvs2svn to create tag

2005-11-03T00:35:26+00:00

'RELENG_6_0_0_RELEASE'.

This commit was manufactured to restore the state of the 6.0-RELEASE image.

Initial import of RFC 2385 (TCP-MD5) digest support.

2004-02-11T04:34:34+00:00

This is the second of two commits; bring in the userland support to finish.

Teach libipsec and setkey about the tcp-md5 class of security associations,
thus allowing administrators to add per-host keys to the SADB for use by
the tcpsignature_compute() function.

Document that a single SPI must be used until such time as the code which
adds support to the SPD to specify flows for tcp-md5 treatment is suitable
for production.

Sponsored by:	sentex.net

- plug memory leak.

2003-11-05T09:41:23+00:00

- fixed a length of the sadb extension in the case of pfkey_send_x5().
- used getprotobynumber() for printing a upper layer protocol name.
- modified the output format against the change of the setkey syntax
  about a icmp6 type/code.
- don't enumerate reserved fields.  use memset.

Obtained from:	KAME

- errx() doesn't need `\n'.

2003-10-26T12:00:27+00:00

- use %u for unsigned variable.

Obtained from:	KAME

stop use of NI_WITHSCOPEID. it was deprecated.

2003-10-21T20:11:47+00:00

Obtained from:	KAME

- support AES counter mode for ESP.

2003-10-13T14:57:41+00:00

- use size_t as return type of schedlen(), as there's no error
  check needed.
- clear key schedule buffer before freeing.

Obtained from:	KAME

- support AES XCBC MAC for AH

2003-10-13T04:54:51+00:00

- correct SADB_X_AALG_RIPEMD160HMAC to 8

Obtained from:	KAME

- RIPEMD160 support

2003-10-12T09:41:42+00:00

- pass size arg to ah->result (avoid assuming result buffer size)

Obtained from:	KAME

Buffer size is not enough in the previous commit. Use 128.

2003-04-17T07:20:00+00:00

Pointed out by:	nectar
MFC after:	1 week

Make character buffer more bigger.

2003-04-16T11:21:12+00:00

Obtained from:	KAME
MFC after:	1 week