src/lib/libipsec, branch release/5.4.0 FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F5.4.0 2004-07-01T17:13:15Z Back out last delta, it just unpolitely reverted some local changes. 2004-07-01T17:13:15Z Ruslan Ermilov ru@FreeBSD.org 2004-07-01T17:13:15Z urn:sha1:86ab142d10d60ccd4161a107ab7eee8944da7c44 Initial import of RFC 2385 (TCP-MD5) digest support. 2004-02-11T04:34:34Z Bruce M Simpson bms@FreeBSD.org 2004-02-11T04:34:34Z urn:sha1:1922fd129e288c22e9c0175a84c13c33cb9345cb This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net - plug memory leak. 2003-11-05T09:41:23Z Hajimu UMEMOTO ume@FreeBSD.org 2003-11-05T09:41:23Z urn:sha1:bd9f52d566a4e7d4881bc8df069dec2208235917 - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the change of the setkey syntax about a icmp6 type/code. - don't enumerate reserved fields. use memset. Obtained from: KAME - errx() doesn't need `\n'. 2003-10-26T12:00:27Z Hajimu UMEMOTO ume@FreeBSD.org 2003-10-26T12:00:27Z urn:sha1:9713f5c1706681abd3304ec450d309d47c61e278 - use %u for unsigned variable. Obtained from: KAME stop use of NI_WITHSCOPEID. it was deprecated. 2003-10-21T20:11:47Z Hajimu UMEMOTO ume@FreeBSD.org 2003-10-21T20:11:47Z urn:sha1:d24cb2490d10a6abfd24c7bba65db9a7dc011715 Obtained from: KAME - support AES counter mode for ESP. 2003-10-13T14:57:41Z Hajimu UMEMOTO ume@FreeBSD.org 2003-10-13T14:57:41Z urn:sha1:b42ac57f4f2c183fda94189f1516ae3c1eff851f - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME - support AES XCBC MAC for AH 2003-10-13T04:54:51Z Hajimu UMEMOTO ume@FreeBSD.org 2003-10-13T04:54:51Z urn:sha1:c65ee7c758bc6f2301eea90a350c234582b45a30 - correct SADB_X_AALG_RIPEMD160HMAC to 8 Obtained from: KAME - RIPEMD160 support 2003-10-12T09:41:42Z Hajimu UMEMOTO ume@FreeBSD.org 2003-10-12T09:41:42Z urn:sha1:492528c051c93c3c37a5f455115eb8da8a1892ba - pass size arg to ah->result (avoid assuming result buffer size) Obtained from: KAME mdoc(7): Properly mark C headers. 2003-09-10T19:24:35Z Ruslan Ermilov ru@FreeBSD.org 2003-09-10T19:24:35Z urn:sha1:743d5d518c25e41a3e9026d400fa625efc306c82 style.Makefile(5) 2003-08-18T15:25:39Z David E. O'Brien obrien@FreeBSD.org 2003-08-18T15:25:39Z urn:sha1:4f4a104ee88afa3e1dbff75adeec199348e0636a