| Commit message (Expand) | Author | Age | Files | Lines |
* | Make sure that the address families of a flow's source address, |  tobhe | 2020-12-14 | 1 | -2/+2 |
* | Enable support for ASN1_DN ipsec identifiers. |  phessler | 2020-11-05 | 1 | -2/+3 |
* | pfkey_get may allocate more memory than is needed to hold the SA |  tobhe | 2020-08-07 | 1 | -2/+2 |
* | Add size to free(9) calls |  kn | 2020-07-18 | 1 | -2/+2 |
* | Add support for autmatically moving traffic between rdomains on ipsec(4) |  tobhe | 2020-04-23 | 1 | -2/+12 |
* | Add padding to struct sadb_x_counter to make it comply with |  stsp | 2019-03-04 | 1 | -1/+2 |
* | Add per-TDB counters and a new SADB extension to export them to |  mpi | 2018-08-28 | 1 | -2/+17 |
* | Flush flows using the radix-tree instead of a global list. |  mpi | 2017-11-20 | 1 | -2/+1 |
* | Dump IPsec flows by iterating over the rafdix-tree. |  mpi | 2017-10-27 | 1 | -3/+1 |
* | Kill struct pfkey_version and move struct pfkeyv2_socket & dump_state |  claudio | 2017-05-29 | 1 | -23/+1 |
* | PFKEY version 2 is the only pfkey version supported. No need for extra |  claudio | 2017-05-29 | 1 | -5/+1 |
* | There is only one version of pfkey in OpenBSD and this will not change any |  claudio | 2017-05-26 | 1 | -5/+1 |
* | Depending on the addresses, ipsecctl(8) automatically groups sa |  bluhm | 2017-02-28 | 1 | -2/+4 |
* | A space here, a space there. Soon we're talking real whitespace |  krw | 2017-01-24 | 1 | -9/+9 |
* | Remove plain DES encryption from IPsec. |  naddy | 2015-12-09 | 1 | -2/+1 |
* | remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@ |  naddy | 2015-12-02 | 1 | -8/+1 |
* | Plumb Chacha20-Poly1305 into the IPsec/ESP and PF_KEY frameworks |  mikeb | 2015-11-03 | 1 | -3/+5 |
* | introduce ipsec-id bundles and use them for ipsecflowinfo, |  markus | 2015-05-23 | 1 | -3/+4 |
* | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer |  mikeb | 2015-04-17 | 1 | -3/+2 |
* | change {import,export}_identity so it can be used for policies; ok mikeb |  markus | 2015-04-16 | 1 | -3/+3 |
* | Remove support for storing credentials and auth information in the kernel. |  mikeb | 2015-04-14 | 1 | -30/+1 |
* | remove KPDK. not really used, and a bad choice anyway. ok naddy |  tedu | 2014-12-28 | 1 | -4/+2 |
* | Move more stuff under _KERNEL |  deraadt | 2013-10-24 | 1 | -1/+2 |
* | normalize structure definitions |  deraadt | 2013-03-09 | 1 | -7/+4 |
* | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set |  markus | 2012-09-18 | 1 | -4/+1 |
* | Add support for the Extended (64-bit) Sequence Number as defined |  mikeb | 2012-06-29 | 1 | -9/+10 |
* | Retire Skipjack |  mikeb | 2010-10-06 | 1 | -3/+2 |
* | Add AES-GCM Transform Identifiers as specified by IANA in |  mikeb | 2010-09-22 | 1 | -1/+8 |
* | Add support for using IPsec in multiple rdomains. |  reyk | 2010-07-09 | 1 | -3/+4 |
* | Allow to specify an alternative enc(4) interface for an SA. All |  reyk | 2010-07-01 | 1 | -2/+11 |
* | add support to tag ipsec traffic belonging to specific IKE-initiated |  reyk | 2006-11-24 | 1 | -2/+11 |
* | Use export_flow() to wrap policies retrieved via sysctl in pfkey message |  hshoexer | 2005-05-27 | 1 | -2/+8 |
* | AESCTR support for ESP (RFC 3686); ok hshoexer |  markus | 2005-05-25 | 1 | -1/+2 |
* | Add sysctl for dumping the SPD |  hshoexer | 2005-04-04 | 1 | -1/+2 |
* | implement net.key.v2.sadb_dump.{unspec,esp,ah,...} sysctl subtree |  markus | 2004-11-26 | 1 | -2/+5 |
* | Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding this |  ho | 2004-08-10 | 1 | -2/+4 |
* | don't convert tcpmd5 to ip-over-ip in SADB_X_GETSPROTO; from hshoexer |  markus | 2004-01-27 | 1 | -1/+2 |
* | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) |  markus | 2003-12-02 | 1 | -2/+13 |
* | conform to RFC2367 on SADB_xx naming (local name must be prefixed with |  itojun | 2003-07-24 | 1 | -7/+7 |
* | SADB_X_CALG_MAX is supposed to be the highest numbered supported algorithm |  jason | 2003-02-24 | 1 | -2/+2 |
* | KNF |  deraadt | 2003-02-16 | 1 | -5/+5 |
* | KNF |  jason | 2003-02-16 | 1 | -105/+104 |
* | s/LSZ/LZS (consistent with linux and isakmpd *.cst) |  jason | 2003-02-15 | 1 | -2/+2 |
* | Add flow type arg to import_flow() |  ho | 2002-06-07 | 1 | -2/+2 |
* | import_flow() prototype |  angelos | 2002-05-31 | 1 | -1/+4 |
* | NRL license cleaning |  deraadt | 2001-12-18 | 1 | -11/+40 |
* | $OpenBSD$ tag |  angelos | 2001-07-05 | 1 | -1/+1 |
* | Include files for IPComp support. angelos@ ok. |  jjbg | 2001-07-05 | 1 | -2/+12 |
* | By popular demand, protect from multiple inclusion, and fix to use the |  angelos | 2001-06-09 | 1 | -3/+3 |
* | Flag field for flows. |  angelos | 2001-06-08 | 1 | -1/+4 |