src/usr.sbin/setkey, branch main

setkey(8) was repo-copied from usr.sbin/ to sbin/.

2005-10-12T21:40:41+00:00

This will allow for NFS mount of /usr over IPsec.

Discussed on:	arch@

Fixed the misplaced $FreeBSD$.

2005-02-09T18:07:17+00:00

Added the EXIT STATUS section where appropriate.

2005-01-17T07:44:44+00:00

Fixed display type.

2005-01-15T12:26:29+00:00

Reapply traditionally lost fixes, fixed some more.

2004-06-05T20:22:15+00:00

This manpage needs an English clenup.

check if the null encryption is supported or not.

2004-05-13T15:46:28+00:00

Requested by:	bms
Obtained from:	KAME

Fix regression in setkey whereby parser would fail to recognise tcp as

2004-03-31T18:38:02+00:00

both a security protocol and an upper level protocol for encapsulation.

PR:		bin/63616
Submitted by:	ume@

Fixed mispellings of '\0' as NULL.

2004-03-11T11:41:54+00:00

Initial import of RFC 2385 (TCP-MD5) digest support.

2004-02-11T04:34:34+00:00

This is the second of two commits; bring in the userland support to finish.

Teach libipsec and setkey about the tcp-md5 class of security associations,
thus allowing administrators to add per-host keys to the SADB for use by
the tcpsignature_compute() function.

Document that a single SPI must be used until such time as the code which
adds support to the SPD to specify flows for tcp-md5 treatment is suitable
for production.

Sponsored by:	sentex.net

enable aes-xcbc-mac and aes-ctr, again.

2003-11-10T10:39:14+00:00