summaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* Trigger soft lifetime expiration on sequence numberMarcin Wojtas2020-10-161-1/+6
* Add support for IPsec ESN and pass relevant information to crypto layerMarcin Wojtas2020-10-163-14/+122
* Implement anti-replay algorithm with ESN supportMarcin Wojtas2020-10-166-96/+222
* net: clean up empty lines in .c and .h filesMateusz Guzik2020-09-018-17/+2
* Simplify IPsec transform-specific teardown.John Baldwin2020-06-256-37/+18
* Enter and exit the network epoch for async IPsec callbacks.John Baldwin2020-06-252-6/+23
* Use zfree() to explicitly zero IPsec keys.John Baldwin2020-06-254-19/+4
* Add the SCTP_SUPPORT kernel option.Mark Johnston2020-06-181-3/+3
* Consistently include opt_ipsec.h for consumers of <netipsec/ipsec.h>.John Baldwin2020-05-295-5/+5
* Fix AES-CTR compatibility issue in ipsecMarcin Wojtas2020-05-261-1/+12
* Add support for optional separate output buffers to in-kernel crypto.John Baldwin2020-05-253-24/+12
* Don't pass bogus keys down for NULL algorithms.John Baldwin2020-05-022-5/+9
* Remove support for IPsec algorithms deprecated in r348205 and r360202.John Baldwin2020-05-025-69/+1
* Fix name of 3DES cipher in deprecation warning.John Baldwin2020-04-221-1/+1
* Deprecate 3des support in IPsec for FreeBSD 13.John Baldwin2020-04-221-1/+5
* Update comments about IVs used in IPsec ESP.John Baldwin2020-04-201-16/+30
* Generate IVs directly in esp_output.John Baldwin2020-04-201-4/+4
* Refactor driver and consumer interfaces for OCF (in-kernel crypto).John Baldwin2020-03-274-194/+141
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-263-6/+11
* netipsec: fix a mismatched uma_zfree -> uma_zfree_pcpuMateusz Guzik2020-02-121-1/+1
* Fix m_pullup() problem after removing PULLDOWN_TESTs and KAME EXT_*macros.Bjoern A. Zeeb2019-12-012-12/+16
* Add support for dummy ESP packets with next header field equal toAndrey V. Elsukov2019-11-271-0/+7
* netinet*: replace IP6_EXTHDR_GET()Bjoern A. Zeeb2019-11-152-5/+12
* Widen NET_EPOCH coverage.Gleb Smirnoff2019-10-071-0/+4
* Fix broken window replay check that will allow old packet to be accepted.Fabien Thomas2019-09-061-0/+2
* Add missing new line in several log messages.Andrey V. Elsukov2019-08-091-6/+6
* netipsec key_register: check for M_NOWAIT alloc failureRyan Libby2019-06-251-1/+1
* Make the warning intervals for deprecated crypto algorithms tunable.John Baldwin2019-06-114-10/+15
* Add deprecation warnings for IPsec algorithms deprecated in RFC 8221.John Baldwin2019-05-232-0/+45
* Replace read_random(9) with more appropriate arc4rand(9) KPIsConrad Meyer2019-04-043-27/+2
* Remove unused argument to priv_check_cred.Mateusz Guzik2018-12-111-1/+1
* Add sadb_x_sa2 extension to SADB_ACQUIRE requests.Andrey V. Elsukov2018-10-211-1/+15
* Fix witness warning in xform_init().Andrey V. Elsukov2018-09-264-90/+87
* Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner2018-07-243-42/+42
* OpenCrypto: Convert sessions to opaque handles instead of integersConrad Meyer2018-07-184-28/+26
* OCF: Add a typedef for session identifiersConrad Meyer2018-07-137-15/+18
* fix locking within tcp_ipsec_pcbctl() to match ipsec4_pcbctl(), ipsec4_pcbctl()Sean Bruno2018-07-041-7/+9
* r335795 build fix: make static functions staticEd Maste2018-06-291-2/+2
* Make debug output produced by `setkey -x` command a more human readable.Andrey V. Elsukov2018-06-291-3/+84
* uma: implement provisional api for per-cpu zonesMateusz Guzik2018-06-081-2/+2
* Rework IP encapsulation handling code.Andrey V. Elsukov2018-06-051-37/+27
* Correctly handle the padding for IPv6-AH, as specified by RFC4302Conrad Meyer2018-06-041-20/+36
* Temporary disable SPDCACHE statistic accounting until proper fix will beAndrey V. Elsukov2018-05-281-2/+2
* netipsec/!VIMAGE: don't declare/define spdcache_destroy on non-VIMAGE buildsMatt Macy2018-05-241-2/+4
* Add a SPD cache to speed up lookups.Fabien Thomas2018-05-222-22/+258
* Merge r1.22-1.23 from NetBSD:Andrey V. Elsukov2018-04-261-6/+10
* Set the proper vnet in IPsec callback functions.John Baldwin2018-03-204-0/+31
* Rework key_sendup_mbuf() a bit:Andrey V. Elsukov2018-03-111-40/+20
* Add KASSERT to check that proper targed was used.Andrey V. Elsukov2018-03-111-0/+2
* Replace panic() with KASSERTs.Andrey V. Elsukov2018-03-111-4/+3
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-11 14:27:05 +0000