| Commit message (Expand) | Author | Age | Files | Lines |
* | Set SA's natt_type before calling key_mature() in key_add(), | vanhu | 2010-05-05 | 1 | -6/+6 |
* | Update SA's NAT-T stuff before calling key_mature() in key_update(), | vanhu | 2010-05-05 | 1 | -6/+6 |
* | MFP4: @176978-176982, 176984, 176990-176994, 177441 | bz | 2010-04-29 | 1 | -10/+11 |
* | Locks SPTREE when setting some SP entries to state DEAD. | vanhu | 2010-04-15 | 1 | -0/+6 |
* | When tearing down IPsec as part of a (virtual) network stack, | bz | 2010-03-28 | 1 | -7/+9 |
* | fixed two race conditions when inserting/removing SAs via PFKey, | vanhu | 2009-11-17 | 1 | -2/+3 |
* | When checking traffic endpoint's adresses families in key_spdadd(), | vanhu | 2009-09-16 | 1 | -12/+2 |
* | Silent gcc? Yeah, you wish. What I ment was to silence gcc. | pjd | 2009-09-06 | 1 | -2/+2 |
* | Initialize state_valid and arraysize variable so gcc won't complain. | pjd | 2009-09-06 | 1 | -1/+3 |
* | Improve code a bit by eliminating goto and having one unlock per lock. | pjd | 2009-09-06 | 1 | -4/+3 |
* | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | rwatson | 2009-08-01 | 1 | -1/+0 |
* | Reimplement and/or implement vnet list locking by replacing a mostly | rwatson | 2009-07-19 | 1 | -2/+2 |
* | Remove unused VNET_SET() and related macros; only VNET_GET() is | rwatson | 2009-07-16 | 1 | -18/+18 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | rwatson | 2009-07-14 | 1 | -137/+72 |
* | Add address list locking for in6_ifaddrhead/ia_link: as with locking | rwatson | 2009-06-25 | 1 | -2/+8 |
* | Add a new global rwlock, in_ifaddr_lock, which will synchronize use of the | rwatson | 2009-06-25 | 1 | -0/+3 |
* | Convert netinet6 to using queue(9) rather than hand-crafted linked lists | rwatson | 2009-06-24 | 1 | -1/+1 |
* | Move setting of ports from NAT-T below key_getsah() and actually | bz | 2009-06-19 | 1 | -8/+9 |
* | Added support for NAT-Traversal (RFC 3948) in IPsec stack. | vanhu | 2009-06-12 | 1 | -5/+616 |
* | Introduce an infrastructure for dismantling vnet instances. | zec | 2009-06-08 | 1 | -1/+67 |
* | Lock SPTREE before parsing it in key_spddump() | vanhu | 2009-05-27 | 1 | -1/+5 |
* | Only decrease refcnt once when flushing SPD entries, to | vanhu | 2009-05-27 | 1 | -4/+14 |
* | Stub out IN6_LOOKUP_MULTI() for GETSPI requests, for now. | bms | 2009-04-29 | 1 | -0/+4 |
* | key_gettunnel() has been unsued with FAST_IPSEC (now IPSEC). | bz | 2009-04-27 | 1 | -0/+2 |
* | First pass at separating per-vnet initializer functions | zec | 2009-04-06 | 1 | -6/+9 |
* | Fixed comments so it stays in 80 chars by line | vanhu | 2009-03-23 | 1 | -5/+9 |
* | Spelling fix in a comment | vanhu | 2009-03-20 | 1 | -1/+1 |
* | Fixed style for some comments | vanhu | 2009-03-19 | 1 | -1/+2 |
* | Fixed style for some comments | vanhu | 2009-03-19 | 1 | -3/+4 |
* | Fixed deletion of sav entries in key_delsah() | vanhu | 2009-03-18 | 1 | -1/+6 |
* | SAs are valid (but dying) when they reached soft lifetime, | vanhu | 2009-03-05 | 1 | -14/+7 |
* | Change the functions to ANSI in those cases where it breaks promotion | rdivacky | 2009-02-24 | 1 | -38/+13 |
* | Another step assimilating IPv[46] PCB code - directly use | bz | 2008-12-15 | 1 | -22/+4 |
* | Rather than using hidden includes (with cicular dependencies), | bz | 2008-12-02 | 1 | -0/+2 |
* | Merge more of currently non-functional (i.e. resolving to | zec | 2008-11-26 | 1 | -14/+16 |
* | Change the initialization methodology for global variables scheduled | zec | 2008-11-19 | 1 | -20/+40 |
* | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -28/+101 |
* | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -98/+99 |
* | Add lifetime informations to generated SPD entries when SPDDUMP | vanhu | 2008-08-05 | 1 | -0/+17 |
* | Enter the 1990s. Use real function declaration. | julian | 2008-06-29 | 1 | -1/+1 |
* | Fix a bug that when getting/dumping the soft lifetime we reported | bz | 2008-03-24 | 1 | -1/+1 |
* | Import change from KAME, rev. 1.362 kame/kame/sys/netkey/key.c | bz | 2008-03-24 | 1 | -1/+1 |
* | Remove the "Fast " from the | bz | 2008-03-14 | 1 | -1/+1 |
* | Fix bugs when allocating and passing information of current lifetime and | bz | 2008-03-02 | 1 | -2/+7 |
* | Commit IPv6 support for FAST_IPSEC to the tree. | gnn | 2007-07-01 | 1 | -5/+0 |
* | 'spi' and the return value of ntohl are unsigned. Remove the extra >=0 | bz | 2007-06-16 | 1 | -1/+6 |
* | In case of failure we can directly return ENOBUFS because | bz | 2007-06-16 | 1 | -10/+3 |
* | Add a missing return so that we drop out in case of an error and | bz | 2007-06-15 | 1 | -3/+2 |
* | With the current code 'src' is never NULL. Nevertheless move the check for | bz | 2007-06-15 | 1 | -1/+3 |
* | Add missing | bz | 2007-05-29 | 1 | -0/+1 |