summaryrefslogtreecommitdiffstats
path: root/usr.sbin/setkey/setkey.8
Commit message (Collapse)AuthorAgeFilesLines
* setkey(8) was repo-copied from usr.sbin/ to sbin/.pjd2005-10-121-693/+0
| | | | | | This will allow for NFS mount of /usr over IPsec. Discussed on: arch@
* Fixed the misplaced $FreeBSD$.ru2005-02-091-1/+2
|
* Added the EXIT STATUS section where appropriate.ru2005-01-171-1/+1
|
* Fixed display type.ru2005-01-151-1/+1
|
* Reapply traditionally lost fixes, fixed some more.ru2004-06-051-38/+43
| | | | This manpage needs an English clenup.
* Initial import of RFC 2385 (TCP-MD5) digest support.bms2004-02-111-0/+7
| | | | | | | | | | | | | | This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net
* enable aes-xcbc-mac and aes-ctr, again.ume2003-11-101-3/+3
|
* - do hexdump on send. set length field properlyume2003-11-051-137/+183
| | | | | | | | | | | | | | | | | - check for encryption/authentication key together with algorithm. - warned if a deprecated encryption algorithm (that includes "simple") is specified. - changed the syntax how to define a policy of a ICMPv6 type and/or a code, like spdadd ::/0 ::/0 icmp6 134,0 -P out none; - random cleanup in parser. - use yyfatal, or return -1 after yyerror. - deal with strdup() failure. - permit scope notation in policy string (-P esp/tunnel/foo%scope-bar%scope/use) - simplify /prefix and [port]. - g/c some unused symbols. Obtained from: KAME
* - support AES counter mode for ESP.ume2003-10-131-0/+5
| | | | | | | | - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME
* - support AES XCBC MAC for AHume2003-10-131-0/+2
| | | | | | - correct SADB_X_AALG_RIPEMD160HMAC to 8 Obtained from: KAME
* - RIPEMD160 supportume2003-10-121-0/+2
| | | | | | - pass size arg to ah->result (avoid assuming result buffer size) Obtained from: KAME
* Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,schweikh2003-01-011-2/+2
| | | | especially in troff files.
* english(4) police.schweikh2002-12-271-1/+1
|
* Fix spacing for -P (policy) examples.fenner2002-07-271-10/+3
|
* s/IPSEC/IPsec according to RFCsblackend2002-07-231-1/+1
| | | | | | PR: in part docs/38668 Reviewed by: charnier MFC after: 10 days
* The .Nm utilitycharnier2002-07-141-7/+10
|
* mdoc(7) police: protect trailing full stops of abbreviationsru2001-08-101-1/+1
| | | | with a trailing zero-width space: `e.g.\&'.
* can not -> cannotsheldonh2001-08-081-1/+1
|
* mdoc(7) police:ru2001-08-071-14/+8
| | | | | | | Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block.
* Remove whitespace at EOL.dd2001-07-151-1/+1
|
* mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).ru2001-07-061-2/+2
|
* Sync with recent KAME.ume2001-06-111-46/+115
| | | | | | | | | | | | | | | | | | This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge. TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT. Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks
* Allow ``ip4'' as an ``upperspec'' value, and update the manbrian2001-05-171-0/+3
| | | | | | | | | | | | | | | | | | page with *all* the permissible values. This should really be spelt ipencap (as /etc/protocols does), but a precedent has already been set by the ipproto array in setkey.c. It would be nice if /etc/protocols was parsed for the upperspec field, but I don't do yacc/lex... This change allows policies that only encrypt the encapsulated packets passing between the endpoints of a gif tunnel. Setting such a policy means that you can still talk directly (and unencrypted) between the public IP numbers with (say) ssh. MFC after: 1 week
* mdoc(7) police: normalize .Nd.ru2001-04-181-1/+1
|
* mdoc(7) police: split punctuation characters + misc fixes.ru2001-02-011-8/+6
|
* Minor layout fixes.ben2001-01-011-0/+4
| | | | | PR: 24004 Submitted by: Jimmy Olgeni <olgeni@uli.it>
* mdoc(7) police: use the new features of the Nm macro.ru2000-11-201-5/+5
|
* synchronize with latest kame tree.itojun2000-07-041-64/+73
| | | | | behavior change: policy syntax was changed. you may need to update your setkey(8) configuration files.
* Typo: "ealgo" -> "aalgo"hoek2000-05-151-1/+1
| | | | PR: docs/18547 (OKAZAKI Tetsurou <okazaki@be.to>)
* Fix typophantom2000-05-061-1/+2
| | | | Noticed by: hoek
* . clear `.Os' macro value since this tool is not KAME only anymorephantom2000-05-011-5/+4
| | | | . add integration note
* Add missing end of semi colon of an example setkey command.shin2000-03-131-1/+1
| | | | Submitted by: kuriyama
* Typo fix. s/SAD/SPD/.shin2000-03-121-1/+1
| | | | Specified by: jdp
* Remove single-space hard sentence breaks. These degrade the qualitysheldonh2000-03-011-2/+4
| | | | | of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc.
* libipsec and IPsec related apps. (and some KAME related man pages)shin2000-01-061-0/+550
Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project
OpenPOWER on IntegriCloud