aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* netipsec key_register: check for M_NOWAIT alloc failureRyan Libby2019-06-251-1/+1
* Make the warning intervals for deprecated crypto algorithms tunable.John Baldwin2019-06-114-10/+15
* Add deprecation warnings for IPsec algorithms deprecated in RFC 8221.John Baldwin2019-05-232-0/+45
* Replace read_random(9) with more appropriate arc4rand(9) KPIsConrad Meyer2019-04-043-27/+2
* Remove unused argument to priv_check_cred.Mateusz Guzik2018-12-111-1/+1
* Add sadb_x_sa2 extension to SADB_ACQUIRE requests.Andrey V. Elsukov2018-10-211-1/+15
* Fix witness warning in xform_init().Andrey V. Elsukov2018-09-264-90/+87
* Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner2018-07-243-42/+42
* OpenCrypto: Convert sessions to opaque handles instead of integersConrad Meyer2018-07-184-28/+26
* OCF: Add a typedef for session identifiersConrad Meyer2018-07-137-15/+18
* fix locking within tcp_ipsec_pcbctl() to match ipsec4_pcbctl(), ipsec4_pcbctl()Sean Bruno2018-07-041-7/+9
* r335795 build fix: make static functions staticEd Maste2018-06-291-2/+2
* Make debug output produced by `setkey -x` command a more human readable.Andrey V. Elsukov2018-06-291-3/+84
* uma: implement provisional api for per-cpu zonesMateusz Guzik2018-06-081-2/+2
* Rework IP encapsulation handling code.Andrey V. Elsukov2018-06-051-37/+27
* Correctly handle the padding for IPv6-AH, as specified by RFC4302Conrad Meyer2018-06-041-20/+36
* Temporary disable SPDCACHE statistic accounting until proper fix will beAndrey V. Elsukov2018-05-281-2/+2
* netipsec/!VIMAGE: don't declare/define spdcache_destroy on non-VIMAGE buildsMatt Macy2018-05-241-2/+4
* Add a SPD cache to speed up lookups.Fabien Thomas2018-05-222-22/+258
* Merge r1.22-1.23 from NetBSD:Andrey V. Elsukov2018-04-261-6/+10
* Set the proper vnet in IPsec callback functions.John Baldwin2018-03-204-0/+31
* Rework key_sendup_mbuf() a bit:Andrey V. Elsukov2018-03-111-40/+20
* Add KASSERT to check that proper targed was used.Andrey V. Elsukov2018-03-111-0/+2
* Replace panic() with KASSERTs.Andrey V. Elsukov2018-03-111-4/+3
* Check that we have PF_KEY sockets before iterating over all RAW sockets.Andrey V. Elsukov2018-03-111-0/+5
* Remove obsoleted and unused key_sendup() function.Andrey V. Elsukov2018-03-112-90/+2
* Remove unused variables and sysctl declaration.Andrey V. Elsukov2018-02-192-9/+0
* Check packet length to do not make out of bounds access. Also save ah_nxtAndrey V. Elsukov2018-02-191-1/+14
* Adopt revision 1.76 and 1.77 from NetBSD:Andrey V. Elsukov2018-01-241-42/+26
* Merge revision 1.35 from NetBSD:Andrey V. Elsukov2018-01-241-2/+2
* Do pass removing some write-only variables from the kernel.Alexander Kabaev2017-12-254-15/+0
* Do better cleaning in key_destroy() for VIMAGE case.Andrey V. Elsukov2017-12-011-0/+19
* sys: general adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-274-0/+8
* sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-2015-0/+30
* ipsec: Use the same keysize values for HMAC as prior to r324017Conrad Meyer2017-11-151-1/+1
* Use correct pointer in key_updateaddresses() when updating NAT-T config.Andrey V. Elsukov2017-11-031-1/+1
* crypto(9) is called from ipsec in CRYPTO_F_CBIFSYNC mode. This is workingFabien Thomas2017-11-034-0/+22
* opencrypto: Loosen restriction on HMAC key sizesConrad Meyer2017-09-261-2/+2
* Fix possible double releasing for SA reference.Andrey V. Elsukov2017-09-011-5/+2
* Remove stale comments.Andrey V. Elsukov2017-08-211-2/+0
* Fix the regression introduced in r275710.Andrey V. Elsukov2017-08-214-14/+18
* Make user supplied data checks a bit stricter.Andrey V. Elsukov2017-08-091-5/+21
* Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hookAndrey V. Elsukov2017-07-313-15/+20
* Build kdebug_secreplay() function only when IPSEC_DEBUG is defined.Andrey V. Elsukov2017-06-011-4/+2
* Disable IPsec debugging code by default when IPSEC_DEBUG kernel optionAndrey V. Elsukov2017-05-297-26/+28
* Fix possible double releasing for SA and SP references.Andrey V. Elsukov2017-05-234-8/+6
* Fix possible double releasing for SA reference.Andrey V. Elsukov2017-05-234-31/+41
* Remove register keyword from sys/ and ANSIfy prototypesEd Maste2017-05-171-2/+2
* Fix SP refcount leak.Andrey V. Elsukov2017-04-261-2/+6
* Add large replay widow support to setkey(8) and libipsec.Andrey V. Elsukov2017-04-131-25/+78
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-27 02:44:20 +0000