| Commit message (Expand) | Author | Age | Files | Lines |
* | Remove last bits of OS adaptation code from the IPSec code. | gnn | 2008-05-17 | 2 | -310/+8 |
* | Fix a bug that when getting/dumping the soft lifetime we reported | bz | 2008-03-24 | 1 | -1/+1 |
* | Import change from KAME, rev. 1.362 kame/kame/sys/netkey/key.c | bz | 2008-03-24 | 1 | -1/+1 |
* | Add ';' missed with the SYSINIT changes. | bz | 2008-03-21 | 1 | -1/+1 |
* | In keeping with style(9)'s recommendations on macros, use a ';' | rwatson | 2008-03-16 | 1 | -1/+1 |
* | Correct IPsec behaviour with a 'use' level in SP but no SA available. | bz | 2008-03-14 | 1 | -22/+33 |
* | Remove the "Fast " from the | bz | 2008-03-14 | 1 | -1/+1 |
* | Fix bugs when allocating and passing information of current lifetime and | bz | 2008-03-02 | 2 | -6/+29 |
* | Rather than passing around a cached 'priv', pass in an ucred to | bz | 2008-02-02 | 3 | -13/+16 |
* | Add sysctls to if_enc(4) to control whether the firewalls or | bz | 2007-11-28 | 5 | -7/+72 |
* | Adjust a comment that suggest that we might consider a panic. | bz | 2007-11-28 | 1 | -1/+3 |
* | Move the priv check before the malloc call for so_pcb. | bz | 2007-11-16 | 1 | -6/+6 |
* | Add a missing priv check in key_attach to prevent non-su users | bz | 2007-11-12 | 1 | -0/+7 |
* | Fix for an infinite loop in processing ESP, IPv6 packets. | gnn | 2007-09-12 | 1 | -4/+17 |
* | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 3 | -30/+0 |
* | Replace hard coded options by their defined PFIL_{IN,OUT} names. | bz | 2007-07-19 | 3 | -3/+6 |
* | Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSEC | gnn | 2007-07-03 | 1 | -2/+2 |
* | Commit IPv6 support for FAST_IPSEC to the tree. | gnn | 2007-07-01 | 9 | -114/+64 |
* | 'spi' and the return value of ntohl are unsigned. Remove the extra >=0 | bz | 2007-06-16 | 1 | -1/+6 |
* | In case of failure we can directly return ENOBUFS because | bz | 2007-06-16 | 1 | -10/+3 |
* | Add a missing return so that we drop out in case of an error and | bz | 2007-06-15 | 1 | -3/+2 |
* | With the current code 'src' is never NULL. Nevertheless move the check for | bz | 2007-06-15 | 1 | -1/+3 |
* | Looking at {ah,esp}_input_cb it seems we might be able to end up | bz | 2007-06-15 | 1 | -1/+1 |
* | s,#,*, in a multi-line comment. This is C. | bz | 2007-06-15 | 1 | -1/+1 |
* | Though we are only called for the three security protocols we can | bz | 2007-06-15 | 1 | -0/+4 |
* | Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in | rwatson | 2007-06-12 | 1 | -3/+1 |
* | In ipsec6_output_tunnel() make sure that the SA contents do not change. | bz | 2007-05-29 | 1 | -1/+8 |
* | fix typo: s,applyed,applied,g | bz | 2007-05-29 | 1 | -2/+2 |
* | Implement ICMPv6 support in ipsec6_get_ulp(). | bz | 2007-05-29 | 1 | -0/+10 |
* | Add missing | bz | 2007-05-29 | 1 | -0/+1 |
* | Integrate the Camellia Block Cipher. For more information see RFC 4132 | gnn | 2007-05-09 | 1 | -0/+3 |
* | Update comment regarding how we check privilege on FreeBSD: we now use | rwatson | 2007-04-10 | 1 | -1/+2 |
* | add include now required for crypto flags | sam | 2007-03-22 | 1 | -0/+2 |
* | Overhaul driver/subsystem api's: | sam | 2007-03-21 | 1 | -1/+1 |
* | s,#if INET6,#ifdef INET6, | bz | 2006-12-14 | 2 | -2/+2 |
* | MFp4: 92972, 98913 + one more change | bz | 2006-12-12 | 2 | -3/+15 |
* | Add priv.h include required to build FAST_IPSEC, which is not present in | rwatson | 2006-11-07 | 1 | -0/+1 |
* | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -1/+3 |
* | Fix build breakage from previous commit which confused key_abort and key_close. | gnn | 2006-07-22 | 1 | -1/+1 |
* | Change semantics of socket close and detach. Add a new protocol switch | rwatson | 2006-07-21 | 1 | -0/+12 |
* | - Use suser_cred(9) instead of directly comparing cr_uid. | pjd | 2006-06-27 | 1 | -2/+3 |
* | Add a pseudo interface for packet filtering IPSec connections before or after | thompsa | 2006-06-26 | 4 | -0/+35 |
* | Change '#if INET' and '#if INET6' to '#ifdef INET' and '#ifdef INET6'. | pjd | 2006-06-04 | 2 | -3/+3 |
* | Extend the notdef #ifdef to cover the packet copy as there is no point in doi... | gnn | 2006-06-04 | 1 | -8/+4 |
* | Prevent disappearing SAD entries by implementing MPsafe refcounting. | pjd | 2006-05-20 | 1 | -20/+33 |
* | - The authsize field from auth_hash structure was removed. | pjd | 2006-05-17 | 2 | -10/+11 |
* | Hide net.inet.ipsec.test_{replay,integrity} sysctls under #ifdef REGRESSION. | pjd | 2006-04-10 | 4 | -0/+12 |
* | Introduce two new sysctls: | pjd | 2006-04-09 | 4 | -2/+54 |
* | Be consistent with the rest of the code. | pjd | 2006-04-09 | 1 | -1/+1 |
* | Remove unused variables s and error in key_detach. The previous | dd | 2006-04-04 | 1 | -1/+0 |