summaryrefslogtreecommitdiffstats
path: root/lib/libipsec
Commit message (Collapse)AuthorAgeFilesLines
* MFC r285108:Luiz Otavio O Souza2015-10-201-0/+3
| | | | | | | | | | | | | | | | New AES modes for IPSec, user space components. Update setkey and libipsec to understand aes-gcm-16 as an encryption method. A partial commit of the work in review D2936. Submitted by: eri Reviewed by: jmg MFC after: 2 weeks Sponsored by: Rubicon Communications (Netgate) TAG: IPSEC-HEAD Issue: #4841
* Revert AESNI patches.Luiz Otavio O Souza2015-10-201-9/+0
| | | | | | | | | Revert "Importing pfSense patch aesgcm.soft.1.patch" This reverts commit 46e99a8858f1c843c1774e472c11d422ca2163ae. TAG: IPSEC-HEAD Issue: #4841
* Importing pfSense patch aesgcm.soft.1.patchRenato Botelho2015-08-171-0/+9
|
* MFC: r264585brueffer2014-04-241-0/+1
| | | | | | Add a missing break in the TCP case. Reviewed by: bms
* Improve compatibility with recent flex from flex.sourceforge.net.jkim2013-05-031-2/+2
|
* Make this more compilable.glebius2013-03-151-8/+7
|
* remove redundant yyparse declarationsbapt2012-12-051-1/+0
| | | | | PR: conf/174079 Submitted by: Garrett Cooper <yanegomi@gmail.com>
* MFp4 204292:bz2012-02-111-0/+12
| | | | | | | | | | Ignore the NAT_T extension types so we can at least dump the SADB from the in-base libipsec/setkey without error when NAT_T support is present in the kernel, though not printing the additional information yet. However in case there is no NAT_T support in kernel still consider them to be an error. MFC after: 8 weeks
* Use the correct constant (with same value) for comparying the SA type.bz2012-02-111-1/+1
| | | | | | PR: kern/142741 Submitted by: Matthijs Kooiman (matthijs stdin.nl) MFC after: 3 days
* In lib/libipsec/policy_token.l, use lex's standard "%option noinput"dim2011-12-161-1/+1
| | | | | | instead of hand-defining the YY_NO_INPUT macro. MFC after: 1 week
* Define YY_NO_INPUT in lib/libipsec/policy_token.l, so lex's input()dim2011-12-151-0/+1
| | | | | | function does not get defined needlessly. MFC after: 1 week
* - change "is is" to "is" or "it is"eadler2011-10-161-1/+1
| | | | | | | | - change "the the" to "the" Approved by: lstewart Approved by: sahil (mentor) MFC after: 3 days
* The use of snprintf() to append to a buffer is not valid according to C99kevlo2010-12-111-1/+2
|
* Build lib/ with WARNS=6 by default.ed2010-01-021-0/+2
| | | | | | | | | Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway.
* Bump the version of all non-symbol-versioned shared libraries inkensmith2009-07-191-1/+1
| | | | | | | | preparation for 8.0-RELEASE. Add the previous version of those libraries to ObsoleteFiles.inc and bump __FreeBSD_Version. Reviewed by: kib Approved by: re (rwatson)
* Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-0111-19/+18
| | | | | | | | This commit includes all remaining changes for the time being including user space updates. Submitted by: bz Approved by: re
* Bump library versions in preparation for 7.0.deischen2007-05-211-1/+1
| | | | Ok'd by: kan
* Integrate the Camellia Block Cipher. For more information see RFC 4132gnn2007-05-091-0/+3
| | | | | | | and its bibliography. Submitted by: Tomoyuki Okazaki <okazaki at kick dot gr dot jp> MFC after: 1 month
* Markup fixes.ru2006-09-171-50/+47
|
* Provide alternate default for SHLIBDIR before bsd.own.mk does this.ru2006-03-181-1/+2
| | | | Reported by: phk
* Reimplementation of world/kernel build options. For details, see:ru2006-03-171-1/+3
| | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
* Clean up some descriptions and remove ambiguities in the language.gnn2006-02-142-97/+146
| | | | | | Add explanations to the examples. MFC after: 1 week
* Bump the shared library version number of all libraries that have notkensmith2005-07-221-1/+1
| | | | | | | been bumped since RELENG_5. Reviewed by: ru Approved by: re (not needed for commit check but in principle...)
* Fixed the misplaced $FreeBSD$.ru2005-02-092-2/+4
|
* NOINET6 -> NO_INET6ru2004-12-211-1/+1
|
* Back out last delta, it just unpolitely reverted some local changes.ru2004-07-011-8/+8
|
* Initial import of RFC 2385 (TCP-MD5) digest support.bms2004-02-114-1/+20
| | | | | | | | | | | | | | This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net
* - plug memory leak.ume2003-11-056-110/+150
| | | | | | | | | | - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the change of the setkey syntax about a icmp6 type/code. - don't enumerate reserved fields. use memset. Obtained from: KAME
* - errx() doesn't need `\n'.ume2003-10-264-26/+24
| | | | | | - use %u for unsigned variable. Obtained from: KAME
* stop use of NI_WITHSCOPEID. it was deprecated.ume2003-10-212-8/+0
| | | | Obtained from: KAME
* - support AES counter mode for ESP.ume2003-10-131-0/+3
| | | | | | | | - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME
* - support AES XCBC MAC for AHume2003-10-131-0/+3
| | | | | | - correct SADB_X_AALG_RIPEMD160HMAC to 8 Obtained from: KAME
* - RIPEMD160 supportume2003-10-121-0/+3
| | | | | | - pass size arg to ah->result (avoid assuming result buffer size) Obtained from: KAME
* mdoc(7): Properly mark C headers.ru2003-09-101-1/+1
|
* style.Makefile(5)obrien2003-08-181-1/+1
|
* Stage 3 of dynamic root support. Make all the libraries needed to rungordon2003-08-171-0/+1
| | | | | | binaries in /bin and /sbin installed in /lib. Only the versioned files reside in /lib, the .so symlink continues to live /usr/lib so the toolchain doesn't need to be modified.
* Buffer size is not enough in the previous commit. Use 128.sumikawa2003-04-171-2/+2
| | | | | Pointed out by: nectar MFC after: 1 week
* Make character buffer more bigger.sumikawa2003-04-161-2/+2
| | | | | Obtained from: KAME MFC after: 1 week
* The .Fn functioncharnier2003-03-241-2/+4
|
* The .Fn function. Spelling.charnier2003-02-062-10/+21
|
* Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,schweikh2003-01-011-1/+1
| | | | especially in troff files.
* english(4) police.schweikh2002-12-271-1/+1
|
* Zap now-unused SHLIB_MINORpeter2002-09-281-1/+0
|
* just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.suz2002-04-192-2/+7
| | | | | | | (based on freebsd4-snap-20020128) Reviewed by: ume MFC after: 1 week
* Remove multi-line __P() usage.obrien2002-03-223-48/+43
|
* Remove __P() usage.obrien2002-03-218-55/+55
|
* mdoc(7) police: Use the new .In macro for #include statements.ru2001-10-012-2/+2
|
* Add __FBSDID()s to libipsecdillon2001-09-306-6/+18
|
* mdoc(7) police: fixed the "new sentence" bogons.ru2001-08-101-1/+1
|
* mdoc(7) police:ru2001-08-071-6/+6
| | | | | | | Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block.
OpenPOWER on IntegriCloud