summaryrefslogtreecommitdiffstats
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* Add missing va_end() in an error case to clean up after va_start()brueffer2011-10-071-0/+1
* Update packet filter (pf) code to OpenBSD 4.5.bz2011-06-283-0/+6
* Release SP's refcount in key_get_spdbyid().vanhu2011-05-091-0/+1
* Make IPsec compile without INET adding appropriate #ifdef checks.bz2011-04-277-67/+112
* Do not allow recursive RFC3173 IPComp payload.bz2011-04-011-0/+21
* Optimisation in IPSEC(4):fabient2011-03-317-75/+69
* Fix two SA refcount:fabient2011-03-312-1/+1
* Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant.vanhu2011-02-184-13/+84
* After some off-list discussion, revert a number of changes to thedim2010-11-223-20/+20
* Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughoutdim2010-11-143-20/+20
* Announce both IPsec and UDP Encap (NAT-T) if available forbz2010-10-301-0/+5
* Fix typo in comment.thomas2010-10-251-1/+1
* Make the IPsec SADB embedded route cache a union to be able to hold both thebz2010-10-233-6/+13
* Remove dead code:bz2010-10-141-3/+1
* Style: make the asterisk go with the variable name, not the type.bz2010-10-141-1/+1
* MFp4 @178283:bz2010-05-241-1/+1
* Set SA's natt_type before calling key_mature() in key_add(),vanhu2010-05-051-6/+6
* Update SA's NAT-T stuff before calling key_mature() in key_update(),vanhu2010-05-051-6/+6
* MFP4: @176978-176982, 176984, 176990-176994, 177441bz2010-04-299-44/+50
* Locks SPTREE when setting some SP entries to state DEAD.vanhu2010-04-151-0/+6
* Fix a logic error in ipsec code that extractseri2010-04-021-1/+1
* When tearing down IPsec as part of a (virtual) network stack,bz2010-03-281-7/+9
* Correct typo in comment.pjd2010-02-181-1/+1
* Enable IPcomp by default.bz2009-11-291-1/+1
* Add more statistics variables for IPcomp.bz2009-11-292-3/+19
* Assimilate very similar input and output code pathsbz2009-11-291-4/+2
* Only add the IPcomp header if crypto reported success and we have a lowerbz2009-11-291-51/+53
* Remove whitespace.bz2009-11-281-3/+3
* Directly send data uncompressed if the packet payload size is lower thanbz2009-11-281-0/+11
* Correct a typo.bz2009-11-281-1/+1
* fixed two race conditions when inserting/removing SAs via PFKey,vanhu2009-11-171-2/+3
* Changed an IPSEC_ASSERT to a simple test, as such invalid packetsvanhu2009-10-011-3/+9
* When checking traffic endpoint's adresses families in key_spdadd(),vanhu2009-09-161-12/+2
* Silent gcc? Yeah, you wish. What I ment was to silence gcc.pjd2009-09-061-2/+2
* Initialize state_valid and arraysize variable so gcc won't complain.pjd2009-09-061-1/+3
* Improve code a bit by eliminating goto and having one unlock per lock.pjd2009-09-061-4/+3
* Correct typo in comment.pjd2009-09-061-1/+1
* Rework global locks for interface list and index management, correctingrwatson2009-08-231-4/+4
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andrwatson2009-08-0111-11/+0
* Introduce and use a sysinit-based initialization scheme for virtualrwatson2009-07-232-26/+4
* Garbage collect vnet module registrations that have neither constructorsrwatson2009-07-203-23/+0
* Reimplement and/or implement vnet list locking by replacing a mostlyrwatson2009-07-191-2/+2
* Remove unused VNET_SET() and related macros; only VNET_GET() isrwatson2009-07-1611-51/+51
* Build on Jeff Roberson's linker-set based dynamic per-CPU allocatorrwatson2009-07-1421-713/+274
* Add address list locking for in6_ifaddrhead/ia_link: as with lockingrwatson2009-06-251-2/+8
* Add a new global rwlock, in_ifaddr_lock, which will synchronize use of therwatson2009-06-251-0/+3
* Convert netinet6 to using queue(9) rather than hand-crafted linked listsrwatson2009-06-241-1/+1
* Move setting of ports from NAT-T below key_getsah() and actuallybz2009-06-191-8/+9
* Add the explicit include of vimage.h to another five .c files stillbz2009-06-171-0/+1
* Added support for NAT-Traversal (RFC 3948) in IPsec stack.vanhu2009-06-125-5/+691
OpenPOWER on IntegriCloud