| Commit message (Expand) | Author | Age | Files | Lines |
* | miscellaneous typo fixes: |  jfb | 2005-02-17 | 1 | -2/+2 |
* | First step towards more sane time handling in the kernel -- this changes |  tholo | 2004-06-21 | 1 | -5/+5 |
* | make it possble to use IPsec over link-local address (policy table uses |  itojun | 2004-06-21 | 1 | -3/+3 |
* | simpler ipsp_aux_match() API; ok henning, hshoexer |  markus | 2004-04-14 | 1 | -17/+14 |
* | Check for undersized IP header, found by jbm@, ok angelos@ |  dhartmei | 2002-11-12 | 1 | -1/+9 |
* | whitespace |  itojun | 2002-06-09 | 1 | -2/+2 |
* | Per-socket policies and authentication. Finally. |  angelos | 2002-05-31 | 1 | -63/+382 |
* | Search the correct ACQUIRE list --- shifflett@nps.navy.mil |  angelos | 2002-02-18 | 1 | -2/+2 |
* | It looks like there has been one crack smoking and a few cut and pastes. |  art | 2002-01-23 | 1 | -3/+3 |
* | Pool deals fairly well with physical memory shortage, but it doesn't deal |  art | 2002-01-23 | 1 | -5/+3 |
* | at least ; required after label or case; openbsd@davidkrause.com |  deraadt | 2002-01-02 | 1 | -1/+2 |
* | Reset the error return value if the cached TDB matches the |  angelos | 2001-09-24 | 1 | -1/+2 |
* | When the outgoing socket has BYPASS set, don't bother calling the |  angelos | 2001-08-21 | 1 | -5/+4 |
* | bcmp done wrong, detected at bakeoff. Hint: always use |  niklas | 2001-08-15 | 1 | -2/+2 |
* | Don't drop packets if we're using an ACQUIRE policy and some error |  angelos | 2001-08-06 | 1 | -15/+12 |
* | Use TAILQ_FOREACH() instead of hand-crafted for loops. |  angelos | 2001-06-27 | 1 | -5/+3 |
* | When determining whether there's a pending acquire wrt a policy, look |  angelos | 2001-06-27 | 1 | -4/+4 |
* | Attach IPsec acquire state to policy entries, and relevant cleanups. |  angelos | 2001-06-27 | 1 | -3/+15 |
* | Don't cache packets that hit policies -- we'll do that at the PCB for |  angelos | 2001-06-27 | 1 | -91/+18 |
* | Use the ACQUIRE sequence number to "wake up" acquire state kept and |  angelos | 2001-06-26 | 1 | -73/+45 |
* | ifdef out some currently unused code |  angelos | 2001-06-26 | 1 | -1/+3 |
* | Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ing |  angelos | 2001-06-26 | 1 | -75/+69 |
* | Use pool(9) for IPsec acquires too. |  angelos | 2001-06-26 | 1 | -12/+19 |
* | Use pool(9) for IPsec policy structures. |  angelos | 2001-06-26 | 1 | -6/+15 |
* | Keep the PFKEY sequence number at the TDB, plus a little bit of KNF |  angelos | 2001-06-26 | 1 | -8/+12 |
* | KNF |  angelos | 2001-06-26 | 1 | -700/+692 |
* | Copyright. |  angelos | 2001-06-25 | 1 | -4/+3 |
* | use new timeouts for spd expirations; ho@ ok |  mickey | 2001-06-24 | 1 | -36/+8 |
* | Trim include files. |  angelos | 2001-06-08 | 1 | -8/+2 |
* | Simplify SPD logic (and correct some input cases). |  angelos | 2001-06-07 | 1 | -335/+138 |
* | Match prototype. |  angelos | 2001-05-30 | 1 | -3/+3 |
* | Correctly free information attached to the policy. |  angelos | 2001-05-30 | 1 | -4/+6 |
* | Check that SAs also match on the credentials and the IDs. This means |  angelos | 2001-05-05 | 1 | -23/+30 |
* | Missing splx in error handling. |  art | 2001-04-23 | 1 | -1/+3 |
* | Minor changes, preparing for real socket-attached TDBs; also, more |  angelos | 2001-04-14 | 1 | -3/+3 |
* | allow host-to-host negotiations if no gateway has been specified. |  provos | 2001-04-10 | 1 | -5/+9 |
* | Move offsetof define into sys/param.h |  csapuntz | 2001-04-06 | 1 | -5/+1 |
* | Allow tdbi's to appear in mbufs throughout the stack; this allows |  angelos | 2001-03-28 | 1 | -3/+7 |
* | include <machine/cpu.h>, since schednetisr needs to do a splsoftnet |  bjc | 2001-03-15 | 1 | -1/+3 |
* | Pretty. |  angelos | 2001-02-28 | 1 | -2/+7 |
* | Handle failures more gracefully. |  angelos | 2001-02-28 | 1 | -10/+11 |
* | Keep the last packet sent or received that matched an SPD entry, and |  angelos | 2001-02-28 | 1 | -86/+167 |
* | Compile in non-INET6 kernels. |  angelos | 2000-12-14 | 1 | -3/+9 |
* | Always look for a suitable TDB if the gateway is left unspecified. |  angelos | 2000-12-14 | 1 | -5/+32 |
* | All-1s addresses as policy destinations is also reserved for future |  angelos | 2000-11-17 | 1 | -29/+51 |
* | Fix compile error if lacking -DINET6 |  chris | 2000-10-18 | 1 | -1/+3 |
* | ASKPOLICY message; used by key management to inquire about policy |  angelos | 2000-10-14 | 1 | -10/+184 |
* | Make sure there's enough data on the mbuf for the TCP/UDP ports (if |  angelos | 2000-09-29 | 1 | -1/+15 |
* | Fix checking for incoming packets when the remote gateway has been |  angelos | 2000-09-27 | 1 | -11/+41 |
* | Add IDENTITY payloads to flow establishment (and cleanup accordingly) |  angelos | 2000-09-20 | 1 | -1/+5 |