aboutsummaryrefslogtreecommitdiff
path: root/lib/libipsec
Commit message (Collapse)AuthorAgeFilesLines
* NOINET6 -> NO_INET6Ruslan Ermilov2004-12-211-1/+1
| | | | Notes: svn path=/head/; revision=139115
* Back out last delta, it just unpolitely reverted some local changes.Ruslan Ermilov2004-07-011-8/+8
| | | | Notes: svn path=/head/; revision=131415
* Initial import of RFC 2385 (TCP-MD5) digest support.Bruce M Simpson2004-02-114-1/+20
| | | | | | | | | | | | | | | | | This is the second of two commits; bring in the userland support to finish. Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function. Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production. Sponsored by: sentex.net Notes: svn path=/head/; revision=125681
* - plug memory leak.Hajimu UMEMOTO2003-11-056-110/+150
| | | | | | | | | | | | | - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the change of the setkey syntax about a icmp6 type/code. - don't enumerate reserved fields. use memset. Obtained from: KAME Notes: svn path=/head/; revision=122107
* - errx() doesn't need `\n'.Hajimu UMEMOTO2003-10-264-26/+24
| | | | | | | | | - use %u for unsigned variable. Obtained from: KAME Notes: svn path=/head/; revision=121572
* stop use of NI_WITHSCOPEID. it was deprecated.Hajimu UMEMOTO2003-10-212-8/+0
| | | | | | | Obtained from: KAME Notes: svn path=/head/; revision=121316
* - support AES counter mode for ESP.Hajimu UMEMOTO2003-10-131-0/+3
| | | | | | | | | | | - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME Notes: svn path=/head/; revision=121071
* - support AES XCBC MAC for AHHajimu UMEMOTO2003-10-131-0/+3
| | | | | | | | | - correct SADB_X_AALG_RIPEMD160HMAC to 8 Obtained from: KAME Notes: svn path=/head/; revision=121061
* - RIPEMD160 supportHajimu UMEMOTO2003-10-121-0/+3
| | | | | | | | | - pass size arg to ah->result (avoid assuming result buffer size) Obtained from: KAME Notes: svn path=/head/; revision=121021
* mdoc(7): Properly mark C headers.Ruslan Ermilov2003-09-101-1/+1
| | | | Notes: svn path=/head/; revision=119964
* style.Makefile(5)David E. O'Brien2003-08-181-1/+1
| | | | Notes: svn path=/head/; revision=119071
* Stage 3 of dynamic root support. Make all the libraries needed to runGordon Tetlow2003-08-171-0/+1
| | | | | | | | | binaries in /bin and /sbin installed in /lib. Only the versioned files reside in /lib, the .so symlink continues to live /usr/lib so the toolchain doesn't need to be modified. Notes: svn path=/head/; revision=119017
* Buffer size is not enough in the previous commit. Use 128.Munechika SUMIKAWA2003-04-171-2/+2
| | | | | | | | Pointed out by: nectar MFC after: 1 week Notes: svn path=/head/; revision=113590
* Make character buffer more bigger.Munechika SUMIKAWA2003-04-161-2/+2
| | | | | | | | Obtained from: KAME MFC after: 1 week Notes: svn path=/head/; revision=113556
* The .Fn functionPhilippe Charnier2003-03-241-2/+4
| | | | Notes: svn path=/head/; revision=112541
* The .Fn function. Spelling.Philippe Charnier2003-02-062-10/+21
| | | | Notes: svn path=/head/; revision=110444
* Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,Jens Schweikhardt2003-01-011-1/+1
| | | | | | | especially in troff files. Notes: svn path=/head/; revision=108533
* english(4) police.Jens Schweikhardt2002-12-271-1/+1
| | | | Notes: svn path=/head/; revision=108317
* Zap now-unused SHLIB_MINORPeter Wemm2002-09-281-1/+0
| | | | Notes: svn path=/head/; revision=104073
* just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.SUZUKI Shinsuke2002-04-192-2/+7
| | | | | | | | | | (based on freebsd4-snap-20020128) Reviewed by: ume MFC after: 1 week Notes: svn path=/head/; revision=95023
* Remove multi-line __P() usage.David E. O'Brien2002-03-223-48/+43
| | | | Notes: svn path=/head/; revision=92941
* Remove __P() usage.David E. O'Brien2002-03-218-54/+54
| | | | Notes: svn path=/head/; revision=92917
* mdoc(7) police: Use the new .In macro for #include statements.Ruslan Ermilov2001-10-012-2/+2
| | | | Notes: svn path=/head/; revision=84306
* Add __FBSDID()s to libipsecMatthew Dillon2001-09-306-6/+18
| | | | Notes: svn path=/head/; revision=84208
* mdoc(7) police: fixed the "new sentence" bogons.Ruslan Ermilov2001-08-101-1/+1
| | | | Notes: svn path=/head/; revision=81458
* mdoc(7) police:Ruslan Ermilov2001-08-071-6/+6
| | | | | | | | | | Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block. Notes: svn path=/head/; revision=81251
* printed current sequence number of the SA. accordingly, changedHajimu UMEMOTO2001-08-061-7/+9
| | | | | | | | | | | into sadb_x_sa2_sequence from sadb_x_sa2_reserved3 in the sadb_x_sa2 structure. Also the output of setkey is changed. sequence number of the sadb is replaced to the end of the output. Obtained from: KAME Notes: svn path=/head/; revision=81215
* Remove whitespace at EOL.Dima Dorfman2001-07-151-1/+1
| | | | Notes: svn path=/head/; revision=79754
* Sync with recent KAME.Hajimu UMEMOTO2001-06-119-196/+827
| | | | | | | | | | | | | | | | | | | | | This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge. TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT. Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks Notes: svn path=/head/; revision=78064
* MAN[1-9] -> MAN.Ruslan Ermilov2001-03-271-1/+1
| | | | Notes: svn path=/head/; revision=74870
* mdoc(7) police: split punctuation characters + misc fixes.Ruslan Ermilov2001-02-011-2/+3
| | | | Notes: svn path=/head/; revision=71895
* Fix typo: ispec -> ipsecBen Smithurst2001-01-011-1/+1
| | | | | | | | PR: 24005 Submitted by: Jimmy Olgeni <olgeni@uli.it> Notes: svn path=/head/; revision=70577
* Change the spelling of `.' to `.' from .OBJDIR since `.' really is whereDavid E. O'Brien2000-12-051-1/+1
| | | | | | | generated files land. Also give precedence to generated files. Notes: svn path=/head/; revision=69640
* The GCC 2.96 snapshots have slightly different rules for finding includeDavid E. O'Brien2000-12-011-1/+1
| | | | | | | | | | files. Mostly -I${.CURDIR} was needed -- especially for YACC generated files as the new cpp does not look in the ultimate source file (ie, the .y file)'s directory as told by the "#line" directive. Some were misspellings of "-I${.CURDIR}" as "-I.". Notes: svn path=/head/; revision=69453
* synchronize with latest kame tree.Jun-ichiro itojun Hagino2000-07-0413-594/+1145
| | | | | | | | behavior change: policy syntax was changed. you may need to update your setkey(8) configuration files. Notes: svn path=/head/; revision=62583
* Fix typo.Alexey Zelkin2000-05-062-2/+4
| | | | | | | Noticed by: hoek Notes: svn path=/head/; revision=60092
* . remove some unneeded commentsAlexey Zelkin2000-05-011-8/+6
| | | | | | | | | . replace .Os value with empty value since this library is not KAME only anymore . add a note about IPv6 and IPsec integration to the FreeBSD Notes: svn path=/head/; revision=59847
* . add a note about IPv6/IPsec integration to the FreeBSDAlexey Zelkin2000-05-011-14/+7
| | | | | | | | | . replace .Po/.Pc pairs with .Pq . remove some unneeded comments . .Lb-ify Notes: svn path=/head/; revision=59846
* Don't try to compile in INET6 support when NOINET6 is defined.Steve Price2000-04-151-1/+4
| | | | Notes: svn path=/head/; revision=59266
* Replace the prefix for yylval to less confusing one.Yoshinobu Inoue2000-04-021-1/+1
| | | | | | | (Sorry, this should be committed with previous commit to Makefile.) Notes: svn path=/head/; revision=58913
* Replace the prefix for yylval to less confusing one.Yoshinobu Inoue2000-04-011-2/+2
| | | | | | | Suggested by: bruce Notes: svn path=/head/; revision=58906
* Actually, ${LIBY}/-ly aren't needed either. This should finish unbreakingBrian Feldman2000-03-291-2/+0
| | | | | | | the world build. Notes: svn path=/head/; revision=58760
* Remove libl related dependencies, because it is not necessary, and even more,Yoshinobu Inoue2000-03-281-2/+2
| | | | | | | | | it cause building world failure. Specified by: Nickolay Dudorov <nnd@mail.nsk.ru> Notes: svn path=/head/; revision=58738
* Fixed missing DPADD.Bruce Evans2000-03-271-1/+2
| | | | | | | Fixed style bug for LDADD (don't use += for variables defined only once). Notes: svn path=/head/; revision=58671
* Initialize mbuf pointer at getting ipsec policy.Yoshinobu Inoue2000-03-091-1/+1
| | | | | | | | | | | | | Without this, kernel will panic at getsockopt() of IPSEC_POLICY. Also make compilable libipsec/test-policy.c which tries getsockopt() of IPSEC_POLICY. Approved by: jkh Submitted by: sakane@kame.net Notes: svn path=/head/; revision=57855
* s/ispec/ipsec/, and add a missing comma.Nik Clayton2000-03-071-1/+1
| | | | | | | | PR: docs/16995 Submitted by: Benno Rice <benno@netizen.com.au> Notes: svn path=/head/; revision=57795
* Change IPv6 scoped addr format again based on recent standard discussion.Yoshinobu Inoue2000-02-191-1/+1
| | | | | | | | | | | | Sorry for the flapping, but no change will be done for 4.0 anymore. Official standard will be published around April or later. If different format would be adopted at that time, then support for the new format will be added to the succeeding FreeBSD 4.x. Approved by: jkh Notes: svn path=/head/; revision=57340
* Set libipsec shared library number to 0Yoshinobu Inoue2000-02-031-0/+2
| | | | | | | | | | | | When libipsec library is created, no SHLIB numbers are specified in the Makefile. Then the library version was set to 2.(by default?) So change it to 0. For now it should not be problem, because the contents are same. I'll also prepare an entry for UPDATING. Notes: svn path=/head/; revision=56976
* Fixed missing include and missing arg in synopsis.Bruce Evans2000-01-131-1/+2
| | | | Notes: svn path=/head/; revision=55898
* Fixed missing include in synopsis.Bruce Evans2000-01-131-0/+1
| | | | Notes: svn path=/head/; revision=55897