summaryrefslogtreecommitdiffstats
path: root/lib/libipsec
Commit message (Collapse)AuthorAgeFilesLines
* MFC: r264585brueffer2014-04-241-0/+1
| | | | | | Add a missing break in the TCP case. Reviewed by: bms
* Improve compatibility with recent flex from flex.sourceforge.net.jkim2013-05-031-2/+2
|
* Make this more compilable.glebius2013-03-151-8/+7
|
* remove redundant yyparse declarationsbapt2012-12-051-1/+0
| | | | | PR: conf/174079 Submitted by: Garrett Cooper <yanegomi@gmail.com>
* MFp4 204292:bz2012-02-111-0/+12
| | | | | | | | | | Ignore the NAT_T extension types so we can at least dump the SADB from the in-base libipsec/setkey without error when NAT_T support is present in the kernel, though not printing the additional information yet. However in case there is no NAT_T support in kernel still consider them to be an error. MFC after: 8 weeks
* Use the correct constant (with same value) for comparying the SA type.bz2012-02-111-1/+1
| | | | | | PR: kern/142741 Submitted by: Matthijs Kooiman (matthijs stdin.nl) MFC after: 3 days
* In lib/libipsec/policy_token.l, use lex's standard "%option noinput"dim2011-12-161-1/+1
| | | | | | instead of hand-defining the YY_NO_INPUT macro. MFC after: 1 week
* Define YY_NO_INPUT in lib/libipsec/policy_token.l, so lex's input()dim2011-12-151-0/+1
| | | | | | function does not get defined needlessly. MFC after: 1 week
* - change "is is" to "is" or "it is"eadler2011-10-161-1/+1
| | | | | | | | - change "the the" to "the" Approved by: lstewart Approved by: sahil (mentor) MFC after: 3 days
* The use of snprintf() to append to a buffer is not valid according to C99kevlo2010-12-111-1/+2
|
* Build lib/ with WARNS=6 by default.ed2010-01-021-0/+2
| | | | | | | | | Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway.
* Bump the version of all non-symbol-versioned shared libraries inkensmith2009-07-191-1/+1
| | | | | | | | preparation for 8.0-RELEASE. Add the previous version of those libraries to ObsoleteFiles.inc and bump __FreeBSD_Version. Reviewed by: kib Approved by: re (rwatson)
* Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-0111-19/+18
| | | | | | | | This commit includes all remaining changes for the time being including user space updates. Submitted by: bz Approved by: re
* Bump library versions in preparation for 7.0.deischen2007-05-211-1/+1
| | | | Ok'd by: kan
* Integrate the Camellia Block Cipher. For more information see RFC 4132gnn2007-05-091-0/+3
| | | | | | | and its bibliography. Submitted by: Tomoyuki Okazaki <okazaki at kick dot gr dot jp> MFC after: 1 month
* Markup fixes.ru2006-09-171-50/+47
|
* Provide alternate default for SHLIBDIR before bsd.own.mk does this.ru2006-03-181-1/+2
| | | | Reported by: phk
* Reimplementation of world/kernel build options. For details, see:ru2006-03-171-1/+3
| | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
* Clean up some descriptions and remove ambiguities in the language.gnn2006-02-142-97/+146
| | | | | | Add explanations to the examples. MFC after: 1 week
* Bump the shared library version number of all libraries that have notkensmith2005-07-221-1/+1
| | | | | | | been bumped since RELENG_5. Reviewed by: ru Approved by: re (not needed for commit check but in principle...)
* Fixed the misplaced $FreeBSD$.ru2005-02-092-2/+4
|
* NOINET6 -> NO_INET6ru2004-12-211-1/+1
|
* Back out last delta, it just unpolitely reverted some local changes.ru2004-07-011-8/+8
|
* Initial import of RFC 2385 (TCP-MD5) digest support.bms2004-02-114-1/+20
| | | | | | | | | | | | | | This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net
* - plug memory leak.ume2003-11-056-110/+150
| | | | | | | | | | - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the change of the setkey syntax about a icmp6 type/code. - don't enumerate reserved fields. use memset. Obtained from: KAME
* - errx() doesn't need `\n'.ume2003-10-264-26/+24
| | | | | | - use %u for unsigned variable. Obtained from: KAME
* stop use of NI_WITHSCOPEID. it was deprecated.ume2003-10-212-8/+0
| | | | Obtained from: KAME
* - support AES counter mode for ESP.ume2003-10-131-0/+3
| | | | | | | | - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME
* - support AES XCBC MAC for AHume2003-10-131-0/+3
| | | | | | - correct SADB_X_AALG_RIPEMD160HMAC to 8 Obtained from: KAME
* - RIPEMD160 supportume2003-10-121-0/+3
| | | | | | - pass size arg to ah->result (avoid assuming result buffer size) Obtained from: KAME
* mdoc(7): Properly mark C headers.ru2003-09-101-1/+1
|
* style.Makefile(5)obrien2003-08-181-1/+1
|
* Stage 3 of dynamic root support. Make all the libraries needed to rungordon2003-08-171-0/+1
| | | | | | binaries in /bin and /sbin installed in /lib. Only the versioned files reside in /lib, the .so symlink continues to live /usr/lib so the toolchain doesn't need to be modified.
* Buffer size is not enough in the previous commit. Use 128.sumikawa2003-04-171-2/+2
| | | | | Pointed out by: nectar MFC after: 1 week
* Make character buffer more bigger.sumikawa2003-04-161-2/+2
| | | | | Obtained from: KAME MFC after: 1 week
* The .Fn functioncharnier2003-03-241-2/+4
|
* The .Fn function. Spelling.charnier2003-02-062-10/+21
|
* Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,schweikh2003-01-011-1/+1
| | | | especially in troff files.
* english(4) police.schweikh2002-12-271-1/+1
|
* Zap now-unused SHLIB_MINORpeter2002-09-281-1/+0
|
* just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.suz2002-04-192-2/+7
| | | | | | | (based on freebsd4-snap-20020128) Reviewed by: ume MFC after: 1 week
* Remove multi-line __P() usage.obrien2002-03-223-48/+43
|
* Remove __P() usage.obrien2002-03-218-55/+55
|
* mdoc(7) police: Use the new .In macro for #include statements.ru2001-10-012-2/+2
|
* Add __FBSDID()s to libipsecdillon2001-09-306-6/+18
|
* mdoc(7) police: fixed the "new sentence" bogons.ru2001-08-101-1/+1
|
* mdoc(7) police:ru2001-08-071-6/+6
| | | | | | | Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block.
* printed current sequence number of the SA. accordingly, changedume2001-08-061-7/+9
| | | | | | | | into sadb_x_sa2_sequence from sadb_x_sa2_reserved3 in the sadb_x_sa2 structure. Also the output of setkey is changed. sequence number of the sadb is replaced to the end of the output. Obtained from: KAME
* Remove whitespace at EOL.dd2001-07-151-1/+1
|
* Sync with recent KAME.ume2001-06-119-196/+827
| | | | | | | | | | | | | | | | | | This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge. TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT. Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks
OpenPOWER on IntegriCloud