aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* sys: Remove $FreeBSD$: one-line .c patternWarner Losh2023-08-236-12/+0
* sys: Remove $FreeBSD$: one-line .c comment patternWarner Losh2023-08-2321-21/+0
* sys: Remove $FreeBSD$: two-line .h patternWarner Losh2023-08-233-6/+0
* spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSDWarner Losh2023-07-252-2/+2
* tcp: fix TCP MD5 digest computation for TCP over UDPMichael Tuexen2023-06-251-4/+16
* ipsec: Make algorithm tables read-onlyMark Johnston2023-06-091-3/+3
* ipsec: Clear pad bytes in PF_KEY messagesMark Johnston2023-02-011-40/+29
* ipsec.c: typos in the commentKonstantin Belousov2023-01-221-1/+1
* ipsec: replace SECASVAR mtx by rmlockKristof Provost2022-08-097-59/+142
* Fix unused variable warning in netipsec's key_debug.cDimitry Andric2022-07-291-3/+2
* Adjust function definitions in netipsec's key.c to avoid clang 15 warningsDimitry Andric2022-07-291-2/+2
* Fix unused variable warning in ipsec_mbuf.cDimitry Andric2022-07-241-4/+1
* IPsec: Use protocol-specific malloc types instead of M_XDATA.John Baldwin2022-05-103-31/+40
* syncache: accept packet with no SA when TCP_MD5SIG is setRobert Wing2022-02-101-0/+5
* tcpmd5: return ENOENT when security association not foundRobert Wing2022-02-101-3/+3
* ipsec: fix a logic error in key_do_getnewspiWenfeng Liu2021-12-191-1/+1
* netinet: Remove unneeded mb_unmapped_to_ext() callsMark Johnston2021-12-011-12/+0
* sctp: Remove now-unneeded mb_unmapped_to_ext() callsMark Johnston2021-11-301-12/+0
* ipsec: enter epoch before calling into ipsec_run_hhooksMateusz Guzik2021-10-111-11/+16
* netipsec/key.c: Use ANSI C definition for key_random()Konstantin Belousov2021-08-131-1/+1
* netipsec/keydb.h: fix typoKonstantin Belousov2021-08-131-1/+1
* socket: Implement SO_RERRORRoy Marples2021-08-111-5/+5
* Add missing sockaddr length and family validation to various protocolsMark Johnston2021-05-171-1/+1
* Convert unmapped mbufs before computing checksums in IPsec.John Baldwin2021-01-191-2/+27
* Trigger soft lifetime expiration on sequence numberMarcin Wojtas2020-10-161-1/+6
* Add support for IPsec ESN and pass relevant information to crypto layerMarcin Wojtas2020-10-163-14/+122
* Implement anti-replay algorithm with ESN supportMarcin Wojtas2020-10-166-96/+222
* net: clean up empty lines in .c and .h filesMateusz Guzik2020-09-018-17/+2
* Simplify IPsec transform-specific teardown.John Baldwin2020-06-256-37/+18
* Enter and exit the network epoch for async IPsec callbacks.John Baldwin2020-06-252-6/+23
* Use zfree() to explicitly zero IPsec keys.John Baldwin2020-06-254-19/+4
* Add the SCTP_SUPPORT kernel option.Mark Johnston2020-06-181-3/+3
* Consistently include opt_ipsec.h for consumers of <netipsec/ipsec.h>.John Baldwin2020-05-295-5/+5
* Fix AES-CTR compatibility issue in ipsecMarcin Wojtas2020-05-261-1/+12
* Add support for optional separate output buffers to in-kernel crypto.John Baldwin2020-05-253-24/+12
* Don't pass bogus keys down for NULL algorithms.John Baldwin2020-05-022-5/+9
* Remove support for IPsec algorithms deprecated in r348205 and r360202.John Baldwin2020-05-025-69/+1
* Fix name of 3DES cipher in deprecation warning.John Baldwin2020-04-221-1/+1
* Deprecate 3des support in IPsec for FreeBSD 13.John Baldwin2020-04-221-1/+5
* Update comments about IVs used in IPsec ESP.John Baldwin2020-04-201-16/+30
* Generate IVs directly in esp_output.John Baldwin2020-04-201-4/+4
* Refactor driver and consumer interfaces for OCF (in-kernel crypto).John Baldwin2020-03-274-194/+141
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-263-6/+11
* netipsec: fix a mismatched uma_zfree -> uma_zfree_pcpuMateusz Guzik2020-02-121-1/+1
* Fix m_pullup() problem after removing PULLDOWN_TESTs and KAME EXT_*macros.Bjoern A. Zeeb2019-12-012-12/+16
* Add support for dummy ESP packets with next header field equal toAndrey V. Elsukov2019-11-271-0/+7
* netinet*: replace IP6_EXTHDR_GET()Bjoern A. Zeeb2019-11-152-5/+12
* Widen NET_EPOCH coverage.Gleb Smirnoff2019-10-071-0/+4
* Fix broken window replay check that will allow old packet to be accepted.Fabien Thomas2019-09-061-0/+2
* Add missing new line in several log messages.Andrey V. Elsukov2019-08-091-6/+6