summaryrefslogtreecommitdiffstats
path: root/lib/libipsec
Commit message (Collapse)AuthorAgeFilesLines
* New AES modes for IPSec, user space components.gnn2015-07-031-0/+3
| | | | | | | | | | | | Update setkey and libipsec to understand aes-gcm-16 as an encryption method. A partial commit of the work in review D2936. Submitted by: eri Reviewed by: jmg MFC after: 2 weeks Sponsored by: Rubicon Communications (Netgate)
* new dependssjg2015-06-161-0/+1
|
* Revert r284417 it is not necessary anymorebapt2015-06-151-1/+1
|
* Enforce overwritting SHLIBDIRbapt2015-06-151-1/+1
| | | | | | | | | Since METAMODE has been added, sys.mk loads bsd.mkopt.mk which ends load loading bsd.own.mk which then defines SHLIBDIR before all the Makefile.inc everywhere. This makes /lib being populated again. Reported by: many
* Add META_MODE support.sjg2015-06-131-0/+29
|\ | | | | | | | | | | | | | | | | | | | | Off by default, build behaves normally. WITH_META_MODE we get auto objdir creation, the ability to start build from anywhere in the tree. Still need to add real targets under targets/ to build packages. Differential Revision: D2796 Reviewed by: brooks imp
| * dirdeps.mk now sets DEP_RELDIRsjg2015-06-081-2/+0
| |
| * Updated dependenciessjg2014-05-161-1/+1
| |
| * Updated dependenciessjg2014-05-101-0/+2
| |
| * Merge from headsjg2014-05-081-1/+1
| |\ | |/ |/|
| * Merge headsjg2014-04-271-0/+1
| |\
| * \ Merge from headsjg2013-09-051-2/+2
| |\ \
| * \ \ sync from headsjg2013-04-121-8/+7
| |\ \ \
| * | | | Updated dependenciessjg2013-03-111-0/+1
| | | | |
| * | | | Updated dependenciessjg2013-02-161-2/+0
| | | | |
| * | | | Sync with HEAD.obrien2013-02-081-1/+0
| |\ \ \ \
| * | | | | Updated/new Makefile.dependsjg2012-11-081-0/+3
| | | | | |
| * | | | | Sync FreeBSD's bmake branch with Juniper's internal bmake branch.marcel2012-08-221-0/+26
| | | | | | | | | | | | | | | | | | | | | | | | Requested by: Simon Gerraty <sjg@juniper.net>
* | | | | | Use src.opts.mk in preference to bsd.own.mk except where we need stuffimp2014-05-061-1/+1
| |_|_|_|/ |/| | | | | | | | | | | | | | from the latter.
* | | | | Add a missing break in the TCP case.brueffer2014-04-171-0/+1
| |_|_|/ |/| | | | | | | | | | | | | | | Reviewed by: bms MFC after: 1 week
* | | | Improve compatibility with recent flex from flex.sourceforge.net.jkim2013-05-031-2/+2
| |_|/ |/| |
* | | Make this more compilable.glebius2013-03-151-8/+7
| |/ |/|
* | remove redundant yyparse declarationsbapt2012-12-051-1/+0
|/ | | | | PR: conf/174079 Submitted by: Garrett Cooper <yanegomi@gmail.com>
* MFp4 204292:bz2012-02-111-0/+12
| | | | | | | | | | Ignore the NAT_T extension types so we can at least dump the SADB from the in-base libipsec/setkey without error when NAT_T support is present in the kernel, though not printing the additional information yet. However in case there is no NAT_T support in kernel still consider them to be an error. MFC after: 8 weeks
* Use the correct constant (with same value) for comparying the SA type.bz2012-02-111-1/+1
| | | | | | PR: kern/142741 Submitted by: Matthijs Kooiman (matthijs stdin.nl) MFC after: 3 days
* In lib/libipsec/policy_token.l, use lex's standard "%option noinput"dim2011-12-161-1/+1
| | | | | | instead of hand-defining the YY_NO_INPUT macro. MFC after: 1 week
* Define YY_NO_INPUT in lib/libipsec/policy_token.l, so lex's input()dim2011-12-151-0/+1
| | | | | | function does not get defined needlessly. MFC after: 1 week
* - change "is is" to "is" or "it is"eadler2011-10-161-1/+1
| | | | | | | | - change "the the" to "the" Approved by: lstewart Approved by: sahil (mentor) MFC after: 3 days
* The use of snprintf() to append to a buffer is not valid according to C99kevlo2010-12-111-1/+2
|
* Build lib/ with WARNS=6 by default.ed2010-01-021-0/+2
| | | | | | | | | Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway.
* Bump the version of all non-symbol-versioned shared libraries inkensmith2009-07-191-1/+1
| | | | | | | | preparation for 8.0-RELEASE. Add the previous version of those libraries to ObsoleteFiles.inc and bump __FreeBSD_Version. Reviewed by: kib Approved by: re (rwatson)
* Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-0111-19/+18
| | | | | | | | This commit includes all remaining changes for the time being including user space updates. Submitted by: bz Approved by: re
* Bump library versions in preparation for 7.0.deischen2007-05-211-1/+1
| | | | Ok'd by: kan
* Integrate the Camellia Block Cipher. For more information see RFC 4132gnn2007-05-091-0/+3
| | | | | | | and its bibliography. Submitted by: Tomoyuki Okazaki <okazaki at kick dot gr dot jp> MFC after: 1 month
* Markup fixes.ru2006-09-171-50/+47
|
* Provide alternate default for SHLIBDIR before bsd.own.mk does this.ru2006-03-181-1/+2
| | | | Reported by: phk
* Reimplementation of world/kernel build options. For details, see:ru2006-03-171-1/+3
| | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
* Clean up some descriptions and remove ambiguities in the language.gnn2006-02-142-97/+146
| | | | | | Add explanations to the examples. MFC after: 1 week
* Bump the shared library version number of all libraries that have notkensmith2005-07-221-1/+1
| | | | | | | been bumped since RELENG_5. Reviewed by: ru Approved by: re (not needed for commit check but in principle...)
* Fixed the misplaced $FreeBSD$.ru2005-02-092-2/+4
|
* NOINET6 -> NO_INET6ru2004-12-211-1/+1
|
* Back out last delta, it just unpolitely reverted some local changes.ru2004-07-011-8/+8
|
* Initial import of RFC 2385 (TCP-MD5) digest support.bms2004-02-114-1/+20
| | | | | | | | | | | | | | This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net
* - plug memory leak.ume2003-11-056-110/+150
| | | | | | | | | | - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the change of the setkey syntax about a icmp6 type/code. - don't enumerate reserved fields. use memset. Obtained from: KAME
* - errx() doesn't need `\n'.ume2003-10-264-26/+24
| | | | | | - use %u for unsigned variable. Obtained from: KAME
* stop use of NI_WITHSCOPEID. it was deprecated.ume2003-10-212-8/+0
| | | | Obtained from: KAME
* - support AES counter mode for ESP.ume2003-10-131-0/+3
| | | | | | | | - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME
* - support AES XCBC MAC for AHume2003-10-131-0/+3
| | | | | | - correct SADB_X_AALG_RIPEMD160HMAC to 8 Obtained from: KAME
* - RIPEMD160 supportume2003-10-121-0/+3
| | | | | | - pass size arg to ah->result (avoid assuming result buffer size) Obtained from: KAME
* mdoc(7): Properly mark C headers.ru2003-09-101-1/+1
|
* style.Makefile(5)obrien2003-08-181-1/+1
|
OpenPOWER on IntegriCloud