aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* Add multi-FIB IPv6 support to the core network stack supplementingBjoern A. Zeeb2012-02-031-1/+1
* Clean up some #endif comments removing from short sections. Add #endifBjoern A. Zeeb2012-01-221-1/+1
* Remove unused 'plen' variable.Pawel Jakub Dawidek2011-11-261-2/+1
* The esp_max_ivlen global variable is not needed, we can just usePawel Jakub Dawidek2011-11-261-16/+1
* malloc(M_WAITOK) never fails, so there is no need to check for NULL.Pawel Jakub Dawidek2011-11-261-4/+0
* Eliminate 'err' variable and just use existing 'error'.Pawel Jakub Dawidek2011-11-262-6/+5
* Simplify code a bit.Pawel Jakub Dawidek2011-11-262-12/+6
* There is no need to virtualize esp_max_ivlen.Pawel Jakub Dawidek2011-11-261-6/+5
* Add missing va_end() in an error case to clean up after va_start()Christian Brueffer2011-10-071-0/+1
* Update packet filter (pf) code to OpenBSD 4.5.Bjoern A. Zeeb2011-06-283-0/+6
* Release SP's refcount in key_get_spdbyid().VANHULLEBUS Yvan2011-05-091-0/+1
* Make IPsec compile without INET adding appropriate #ifdef checks.Bjoern A. Zeeb2011-04-277-67/+112
* Do not allow recursive RFC3173 IPComp payload.Bjoern A. Zeeb2011-04-011-0/+21
* Optimisation in IPSEC(4):Fabien Thomas2011-03-317-75/+69
* Fix two SA refcount:Fabien Thomas2011-03-312-1/+1
* Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant.VANHULLEBUS Yvan2011-02-184-13/+84
* After some off-list discussion, revert a number of changes to theDimitry Andric2010-11-223-20/+20
* Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughoutDimitry Andric2010-11-143-20/+20
* Announce both IPsec and UDP Encap (NAT-T) if available forBjoern A. Zeeb2010-10-301-0/+5
* Fix typo in comment.Thomas Quinot2010-10-251-1/+1
* Make the IPsec SADB embedded route cache a union to be able to hold both theBjoern A. Zeeb2010-10-233-6/+13
* Remove dead code:Bjoern A. Zeeb2010-10-141-3/+1
* Style: make the asterisk go with the variable name, not the type.Bjoern A. Zeeb2010-10-141-1/+1
* MFp4 @178283:Bjoern A. Zeeb2010-05-241-1/+1
* Set SA's natt_type before calling key_mature() in key_add(),VANHULLEBUS Yvan2010-05-051-6/+6
* Update SA's NAT-T stuff before calling key_mature() in key_update(),VANHULLEBUS Yvan2010-05-051-6/+6
* MFP4: @176978-176982, 176984, 176990-176994, 177441Bjoern A. Zeeb2010-04-299-44/+50
* Locks SPTREE when setting some SP entries to state DEAD.VANHULLEBUS Yvan2010-04-151-0/+6
* Fix a logic error in ipsec code that extractsErmal Luçi2010-04-021-1/+1
* When tearing down IPsec as part of a (virtual) network stack,Bjoern A. Zeeb2010-03-281-7/+9
* Correct typo in comment.Pawel Jakub Dawidek2010-02-181-1/+1
* Enable IPcomp by default.Bjoern A. Zeeb2009-11-291-1/+1
* Add more statistics variables for IPcomp.Bjoern A. Zeeb2009-11-292-3/+19
* Assimilate very similar input and output code pathsBjoern A. Zeeb2009-11-291-4/+2
* Only add the IPcomp header if crypto reported success and we have a lowerBjoern A. Zeeb2009-11-291-51/+53
* Remove whitespace.Bjoern A. Zeeb2009-11-281-3/+3
* Directly send data uncompressed if the packet payload size is lower thanBjoern A. Zeeb2009-11-281-0/+11
* Correct a typo.Bjoern A. Zeeb2009-11-281-1/+1
* fixed two race conditions when inserting/removing SAs via PFKey,VANHULLEBUS Yvan2009-11-171-2/+3
* Changed an IPSEC_ASSERT to a simple test, as such invalid packetsVANHULLEBUS Yvan2009-10-011-3/+9
* When checking traffic endpoint's adresses families in key_spdadd(),VANHULLEBUS Yvan2009-09-161-12/+2
* Silent gcc? Yeah, you wish. What I ment was to silence gcc.Pawel Jakub Dawidek2009-09-061-2/+2
* Initialize state_valid and arraysize variable so gcc won't complain.Pawel Jakub Dawidek2009-09-061-1/+3
* Improve code a bit by eliminating goto and having one unlock per lock.Pawel Jakub Dawidek2009-09-061-4/+3
* Correct typo in comment.Pawel Jakub Dawidek2009-09-061-1/+1
* Rework global locks for interface list and index management, correctingRobert Watson2009-08-231-4/+4
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-0111-11/+0
* Introduce and use a sysinit-based initialization scheme for virtualRobert Watson2009-07-232-26/+4
* Garbage collect vnet module registrations that have neither constructorsRobert Watson2009-07-203-23/+0
* Reimplement and/or implement vnet list locking by replacing a mostlyRobert Watson2009-07-191-2/+2