| Commit message (Expand) | Author | Age | Files | Lines |
* | introduce ipsec-id bundles and use them for ipsecflowinfo, |  markus | 2015-05-23 | 1 | -42/+133 |
* | Stubs and support code for NIC-enabled IPsec bite the dust. |  mikeb | 2015-04-17 | 1 | -31/+1 |
* | Remove unused ipsp_parse_headers that was supposed to parse packets |  mikeb | 2015-04-17 | 1 | -219/+1 |
* | remove unfinished/unused support for socket-attached ipsec-policies |  markus | 2015-04-16 | 1 | -81/+1 |
* | make ipsp_address thread safe; ok mpi |  mikeb | 2015-04-14 | 1 | -16/+12 |
* | Remove support for storing credentials and auth information in the kernel. |  mikeb | 2015-04-14 | 1 | -44/+11 |
* | Make filter argument to ipsp_aux_match optional like the rest of them. |  mikeb | 2015-04-13 | 1 | -2/+3 |
* | Rename gettdbbyaddr to gettdbbydst; OK markus, hshoexer, mpi |  mikeb | 2015-04-13 | 1 | -23/+26 |
* | Remove unused arguments from gettdb* functions; OK markus, hshoexer, mpi |  mikeb | 2015-04-13 | 1 | -5/+4 |
* | replace the guts of tdb_hash with SipHash24 |  dlg | 2015-04-10 | 1 | -27/+11 |
* | Remove some includes include-what-you-use claims don't |  jsg | 2015-03-14 | 1 | -2/+1 |
* | Userland (base & ports) was adapted to always include <netinet/in.h> |  deraadt | 2015-01-24 | 1 | -9/+7 |
* | unifdef INET in net code as a precursor to removing the pretend option. |  tedu | 2014-12-19 | 1 | -18/+1 |
* | More malloc() -> mallocarray() in the kernel. |  doug | 2014-12-09 | 1 | -8/+8 |
* | move arc4random prototype to systm.h. more appropriate for most code |  tedu | 2014-11-18 | 1 | -2/+1 |
* | remove uneeded proc.h includes |  jsg | 2014-09-14 | 1 | -2/+1 |
* | remove uneeded route.h includes |  jsg | 2014-09-08 | 1 | -2/+1 |
* | Fewer <netinet/in_systm.h> ! |  mpi | 2014-07-22 | 1 | -2/+1 |
* | add a size argument to free. will be used soon, but for now default to 0. |  tedu | 2014-07-12 | 1 | -6/+6 |
* | decouple struct uvmexp into a new file, so that uvm_extern.h and sysctl.h |  deraadt | 2014-07-08 | 1 | -2/+2 |
* | "struct pkthdr" holds a routing table ID, not a routing domain one. |  mpi | 2014-04-14 | 1 | -3/+3 |
* | bzero/bcmp -> memset/memcmp. ok matthew |  tedu | 2014-01-09 | 1 | -15/+15 |
* | Replace most of our formating functions to convert IPv4/6 addresses from |  mpi | 2013-11-11 | 1 | -19/+13 |
* | Remove the number of in6_var.h inclusions by moving some functions and |  mpi | 2013-10-24 | 1 | -2/+1 |
* | These functions are only used in debug code, so put them under |  mpi | 2013-07-04 | 1 | -1/+3 |
* | Remove the extern keyword from function declarations, document |  mpi | 2013-04-11 | 1 | -4/+1 |
* | Remove various external variable declaration from sources files and |  mpi | 2013-04-10 | 1 | -2/+2 |
* | Remove read-only ipsec variables and directly use defines instead. |  mpi | 2013-04-09 | 1 | -9/+8 |
* | code that calls timeout functions should include timeout.h |  tedu | 2013-03-28 | 1 | -1/+2 |
* | spltdb() was really just #define'd to be splsoftnet(); replace the former |  blambert | 2012-09-20 | 1 | -11/+11 |
* | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set |  markus | 2012-09-18 | 1 | -17/+2 |
* | Pre-allocate memory to avoid sleeping after performing a lookup, which |  blambert | 2011-05-11 | 1 | -5/+8 |
* | - use nitems(); no binary change |  jasper | 2011-03-31 | 1 | -2/+2 |
* | Add support for using IPsec in multiple rdomains. |  reyk | 2010-07-09 | 1 | -32/+58 |
* | remove proc.h include from uvm_map.h. This has far reaching effects, as |  tedu | 2010-04-20 | 1 | -1/+2 |
* | Fix two bugs in IPsec/HMAC-SHA2: |  markus | 2010-01-10 | 1 | -2/+2 |
* | don't confuse chars with strings; ok oga@ |  martynas | 2009-08-12 | 1 | -2/+2 |
* | Shuffle function declarations a bit; ipsp_kern doesn't actually exist, |  blambert | 2009-06-02 | 1 | -2/+2 |
* | Fix an off-by-one in the ddb-only debugging function tdb_hashstats. |  oga | 2009-06-02 | 1 | -6/+8 |
* | pfsync v5, mostly written at n2k9, but based on work done at n2k8. |  dlg | 2009-02-16 | 1 | -1/+11 |
* | #if INET => #ifdef INET |  mpf | 2008-10-22 | 1 | -3/+3 |
* | remove dead stores and newly created unused variables. |  chl | 2008-09-15 | 1 | -7/+1 |
* | Convert timeout_add() calls using multiples of hz to timeout_add_sec() |  blambert | 2008-09-10 | 1 | -3/+3 |
* | use arc4random_uniform() for random number requests that are not a |  djm | 2008-04-18 | 1 | -2/+2 |
* | MALLOC/FREE -> malloc/free |  chl | 2007-10-29 | 1 | -2/+2 |
* | MALLOC+bzero -> malloc+M_ZERO. Don't forget FREE->free this time. |  krw | 2007-10-09 | 1 | -30/+18 |
* | Consistently spell FALLTHROUGH to appease lint. |  jsg | 2007-02-14 | 1 | -2/+2 |
* | allow kernels with TCP_SIGNATURE (aka tcp md5sig), but without IPSEC to |  henning | 2007-01-18 | 1 | -1/+3 |
* | add support to tag ipsec traffic belonging to specific IKE-initiated |  reyk | 2006-11-24 | 1 | -1/+14 |
* | Path MTU discovery for NAT-T. |  mpf | 2006-01-13 | 1 | -3/+1 |