summaryrefslogtreecommitdiffstats
path: root/sys/net/if_enc.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Allow setting address.angelos2000-04-101-3/+4
|
* If IFF_LINK0 is set, do IP-in-IP instead of Ethernet-in-IP. This willangelos2000-04-081-4/+11
| | | | | be used to implement overlay networks and more flexible road-warrior support.
* Cryptographic services framework, and software "device driver". Theangelos2000-03-171-27/+2
| | | | | | | | | | | | | | | | | | | | idea is to support various cryptographic hardware accelerators (which may be (detachable) cards, secondary/tertiary/etc processors, software crypto, etc). Supports session migration between crypto devices. What it doesn't (yet) support: - multiple instances of the same algorithm used in the same session - use of multiple crypto drivers in the same session - asymmetric crypto No support for a userland device yet. IPsec code path modified to allow for asynchronous cryptography (callbacks used in both input and output processing). Some unrelated code simplification done in the process (especially for AH). Development of this code kindly supported by Network Security Technologies (NSTI). The code was writen mostly in Greece, and is being committed from Montreal.
* fix include file path related to ip6.itojun2000-02-071-3/+5
|
* Ok, so setsoftnet is md.espie2000-01-251-1/+3
| | | | | | | Well, on the amiga, setsoftnet *REQUIRES* machine/cpu.h to work... and no include mentioned in those files pulls machine/cpu.h... Nit-fix: / * INET6 */ -> /* INET6 */
* Can't bind SAs to enc0angelos2000-01-151-1/+8
|
* Add missing IF_DROPsangelos2000-01-071-1/+7
|
* Properly handle non-IPSEC case.angelos2000-01-021-3/+27
|
* Add SRCSA and CLEARSA ioctls.angelos1999-12-271-19/+82
|
* Implement ioctls for binding SAs to enc interfaces (to be used withangelos1999-12-271-18/+251
| | | | the bridge).
* Fix *stupid* typo/error that was causing the panics in post 2.6, foundangelos1999-11-021-2/+2
| | | | by art@
* Use enc_softc instead of ifnet for encif.angelos1999-10-291-82/+100
|
* remove bogus entry from if_enc address list; and rename enc_softc to encifderaadt1999-07-051-26/+17
|
* The enc interface should not be IFF_LOOPBACK, as AH and ESP uses thatniklas1999-05-161-2/+2
| | | | as receiving interface for filtering
* indentderaadt1998-06-281-103/+85
|
* make the packets which were successfully processed by IPSec available toprovos1998-06-101-26/+4
| | | | bpf via the enc0 interface, using linktype DLT_ENC.
* first step to the setsockopt/getsockopt interface as described inprovos1998-05-181-10/+16
| | | | | | | draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal userland key management applications when security services are requested. this is only for outgoing connections at the moment, incoming packets are not yet checked against the selected socket policy.
* make it easier to add additional transforms. add blowfish and castprovos1997-11-041-2/+6
| | | | encryption. some more info for kernfs/ipsec.
* put old esp/ah and new esp/ah in different files.provos1997-07-111-8/+8
| | | | generalised way of handling transforms.
* major restructuringprovos1997-07-011-129/+125
|
* BPF support ifdefed.angelos1997-02-271-1/+5
|
* OpenBSD tags + some prototyping policeniklas1997-02-241-3/+7
|
* IPSEC package by John Ioannidis and Angelos D. Keromytis. Written inderaadt1997-02-201-0/+247
Greece. From ftp.funet.fi:/pub/unix/security/net/ip/BSDipsec.tar.gz