src-test2/usr.sbin/setkey, branch stable/5 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=stable%2F5 2005-11-05T04:56:00Z MFC 1.8: fixed a crush when either -lh or -ls option is used. 2005-11-05T04:56:00Z Hajimu UMEMOTO ume@FreeBSD.org 2005-11-05T04:56:00Z urn:sha1:fcdb31d877de0ea3a9ed0cf6f2425d05cd4fdb83 Reapply traditionally lost fixes, fixed some more. 2004-06-05T20:22:15Z Ruslan Ermilov ru@FreeBSD.org 2004-06-05T20:22:15Z urn:sha1:6992e2a56ef1972ea11d015a64eb49a26dc9711b This manpage needs an English clenup. check if the null encryption is supported or not. 2004-05-13T15:46:28Z Hajimu UMEMOTO ume@FreeBSD.org 2004-05-13T15:46:28Z urn:sha1:8b205f5e0a3ecc2159b2047b72b636fd5b51e9b8 Requested by: bms Obtained from: KAME Fix regression in setkey whereby parser would fail to recognise tcp as 2004-03-31T18:38:02Z Bruce M Simpson bms@FreeBSD.org 2004-03-31T18:38:02Z urn:sha1:1ba19fe8ce3337974c580a66887d0c4265eb2bfb both a security protocol and an upper level protocol for encapsulation. PR: bin/63616 Submitted by: ume@ Fixed mispellings of '\0' as NULL. 2004-03-11T11:41:54Z Bruce Evans bde@FreeBSD.org 2004-03-11T11:41:54Z urn:sha1:8153ab0e6fb5c344655c9ff21bffc2cc07ff1074 Initial import of RFC 2385 (TCP-MD5) digest support. 2004-02-11T04:34:34Z Bruce M Simpson bms@FreeBSD.org 2004-02-11T04:34:34Z urn:sha1:1922fd129e288c22e9c0175a84c13c33cb9345cb This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net enable aes-xcbc-mac and aes-ctr, again. 2003-11-10T10:39:14Z Hajimu UMEMOTO ume@FreeBSD.org 2003-11-10T10:39:14Z urn:sha1:db5400180673dce820a718cd16cbb14fd64e24f4 - do hexdump on send. set length field properly 2003-11-05T09:47:54Z Hajimu UMEMOTO ume@FreeBSD.org 2003-11-05T09:47:54Z urn:sha1:cf43a05493795bba68b85dc4c43219604b180755 - check for encryption/authentication key together with algorithm. - warned if a deprecated encryption algorithm (that includes "simple") is specified. - changed the syntax how to define a policy of a ICMPv6 type and/or a code, like spdadd ::/0 ::/0 icmp6 134,0 -P out none; - random cleanup in parser. - use yyfatal, or return -1 after yyerror. - deal with strdup() failure. - permit scope notation in policy string (-P esp/tunnel/foo%scope-bar%scope/use) - simplify /prefix and [port]. - g/c some unused symbols. Obtained from: KAME - style 2003-10-17T11:43:44Z Hajimu UMEMOTO ume@FreeBSD.org 2003-10-17T11:43:44Z urn:sha1:2f4c5de968065bba5449a3d15c1b70d5e69c41d1 - rename variable - use strlcpy - const'fy Obtained from: KAME - support AES counter mode for ESP. 2003-10-13T14:57:41Z Hajimu UMEMOTO ume@FreeBSD.org 2003-10-13T14:57:41Z urn:sha1:b42ac57f4f2c183fda94189f1516ae3c1eff851f - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME