aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* ipsec: add key_havesp_anyMateusz Guzik11 days4-10/+11
* ipsec: prohibit unknown directions in key_havespMateusz Guzik11 days1-2/+3
* ipsec: add support for CHACHA20POLY1305Kristof Provost2022-11-024-8/+20
* tcp: remove INP_TIMEWAIT flagGleb Smirnoff2022-10-071-2/+2
* Fix kernel build after fcb3f813f379f544f9cd2a10d18045588da0e132 .Hans Petter Selasky2022-10-042-4/+3
* netinet*: remove PRC_ constants and streamline ICMP processingGleb Smirnoff2022-10-042-18/+23
* netipsec: move specific ipsecmethods declarations to ipsec_support.hGleb Smirnoff2022-10-045-16/+24
* netinet6: retire ip6protosw.hGleb Smirnoff2022-10-041-1/+0
* protosw: refactor protosw and domain static declaration and loadGleb Smirnoff2022-08-171-24/+10
* protosw: separate pr_input and pr_ctlinput out of protoswGleb Smirnoff2022-08-171-1/+3
* ipsec: isolate knowledge about protocols that are last headerGleb Smirnoff2022-08-171-7/+34
* keysock: explicitly initialized LIST_HEADGleb Smirnoff2022-08-121-1/+2
* keysock: do not use raw socket codeGleb Smirnoff2022-08-113-169/+63
* ipsec: Improve validation of PMTUKornel Dulęba2022-07-271-1/+10
* Fix unused variable warning in netipsec's key_debug.cDimitry Andric2022-07-261-3/+2
* Adjust function definitions in netipsec's key.c to avoid clang 15 warningsDimitry Andric2022-07-261-2/+2
* Fix unused variable warning in ipsec_mbuf.cDimitry Andric2022-07-211-4/+1
* ipsec: replace SECASVAR mtx by rmlockKristof Provost2022-07-197-60/+144
* ipsec_encap: setdf is only used for INET.John Baldwin2022-04-131-1/+2
* ipsec: sprinkle CURVNET_ASSERT_SETMateusz Guzik2022-02-191-0/+4
* ipsec: extend vnet coverage in esp_input/output_cbMateusz Guzik2022-02-191-2/+2
* IPsec: Use protocol-specific malloc types instead of M_XDATA.John Baldwin2022-01-243-31/+40
* syncache: accept packet with no SA when TCP_MD5SIG is setRobert Wing2022-01-091-0/+5
* tcpmd5: return ENOENT when security association not foundRobert Wing2022-01-091-3/+3
* netipsec: use SYSINIT(9) instead of dom_init/dom_destroyGleb Smirnoff2022-01-033-29/+26
* protocols: init with standard SYSINIT(9) or VNET_SYSINITGleb Smirnoff2022-01-031-1/+0
* crypto: Consistently use AES instead of Rijndael128 for the AES-CBC cipher.John Baldwin2021-12-161-1/+1
* ipsec: fix a logic error in key_do_getnewspiWenfeng Liu2021-12-141-1/+1
* ipsec: fix a panic with INVARIANTSRobert Wing2021-12-031-1/+1
* netinet: Remove unneeded mb_unmapped_to_ext() callsMark Johnston2021-11-241-12/+0
* sctp: Remove now-unneeded mb_unmapped_to_ext() callsMark Johnston2021-11-161-12/+0
* ipsec: make sure the lock allocated in key_newsav does not false-shareMateusz Guzik2021-11-141-2/+2
* ipsec: fix edge case detection in key_getnewspidMateusz Guzik2021-11-141-3/+5
* ipsec: add a lock encompassing SPI allocationMateusz Guzik2021-11-031-0/+22
* ipsec: fix edge case detection in key_do_getnewspiMateusz Guzik2021-11-031-5/+6
* ipsec: fix typo part2Wojciech Macek2021-09-271-1/+1
* ipsec: fix typo in commentWojciech Macek2021-09-271-2/+2
* ipsec: Add support for PMTUD for IPv6 tunnelsBartlomiej Grzesik2021-09-242-34/+133
* ipsec: If no PMTU in hostcache assume it's equal to link's MTUBartlomiej Grzesik2021-09-241-4/+18
* ipsec: Add PMTUD support for IPsec IPv4 over IPv6 tunnelBartlomiej Grzesik2021-09-241-6/+12
* ipsec: enter epoch before calling into ipsec_run_hhooksMateusz Guzik2021-09-211-11/+16
* ipsec: Validate the protocol identifier in ipsec4_ctlinput()Mark Johnston2021-09-101-1/+7
* ipsec: fix race condition in key.cWojciech Macek2021-08-131-16/+37
* ipsec: Return error code if no matching SA was foundKornel Duleba2021-08-131-0/+6
* ipsec: Check PMTU before sending a frame.Kornel Duleba2021-08-133-1/+90
* netipsec/key.c: Use ANSI C definition for key_random()Konstantin Belousov2021-08-101-1/+1
* netipsec/keydb.h: fix typoKonstantin Belousov2021-08-101-1/+1
* ipsec: Handle ICMP NEEDFRAG message.Wojciech Macek2021-08-097-0/+64
* socket: Implement SO_RERRORRoy Marples2021-07-281-5/+5
* ipsec: globalize lft zone and zero out buffers at allocation timeMateusz Guzik2021-06-281-12/+11