summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_spd.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4)markus2012-07-161-5/+21
* missing PR_NOWAITderaadt2010-09-281-2/+2
* Add support for using IPsec in multiple rdomains.reyk2010-07-091-7/+19
* don't reference an item after it has been returned to the pooldavid2010-07-021-3/+3
* Replace pool_get() + bzero() with pool_get(..., PR_ZERO).chl2010-01-151-6/+3
* In IPsec acquire mode, if the flow was configured for the "any"bluhm2009-01-271-13/+5
* Convert timeout_add() calls using multiples of hz to timeout_add_sec()blambert2008-09-101-2/+2
* Assign the struct size to sin6_len instead of sin6_family.bluhm2008-07-221-2/+2
* 0 -> PR_NOWAIT (which is defined as 0) in pool_getblambert2008-06-111-2/+2
* more rtrequest() to rtrequest1() replacement.claudio2008-05-091-6/+9
* since thehenning2007-09-011-1/+2
* Consistently spell FALLTHROUGH to appease lint.jsg2007-02-141-5/+5
* adjust functions dealing with the routing table to take a table ID ashenning2006-06-161-2/+2
* miscellaneous typo fixes:jfb2005-02-171-2/+2
* First step towards more sane time handling in the kernel -- this changestholo2004-06-211-5/+5
* make it possble to use IPsec over link-local address (policy table usesitojun2004-06-211-3/+3
* simpler ipsp_aux_match() API; ok henning, hshoexermarkus2004-04-141-17/+14
* Check for undersized IP header, found by jbm@, ok angelos@dhartmei2002-11-121-1/+9
* whitespaceitojun2002-06-091-2/+2
* Per-socket policies and authentication. Finally.angelos2002-05-311-63/+382
* Search the correct ACQUIRE list --- shifflett@nps.navy.milangelos2002-02-181-2/+2
* It looks like there has been one crack smoking and a few cut and pastes.art2002-01-231-3/+3
* Pool deals fairly well with physical memory shortage, but it doesn't dealart2002-01-231-5/+3
* at least ; required after label or case; openbsd@davidkrause.comderaadt2002-01-021-1/+2
* Reset the error return value if the cached TDB matches theangelos2001-09-241-1/+2
* When the outgoing socket has BYPASS set, don't bother calling theangelos2001-08-211-5/+4
* bcmp done wrong, detected at bakeoff. Hint: always useniklas2001-08-151-2/+2
* Don't drop packets if we're using an ACQUIRE policy and some errorangelos2001-08-061-15/+12
* Use TAILQ_FOREACH() instead of hand-crafted for loops.angelos2001-06-271-5/+3
* When determining whether there's a pending acquire wrt a policy, lookangelos2001-06-271-4/+4
* Attach IPsec acquire state to policy entries, and relevant cleanups.angelos2001-06-271-3/+15
* Don't cache packets that hit policies -- we'll do that at the PCB forangelos2001-06-271-91/+18
* Use the ACQUIRE sequence number to "wake up" acquire state kept andangelos2001-06-261-73/+45
* ifdef out some currently unused codeangelos2001-06-261-1/+3
* Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ingangelos2001-06-261-75/+69
* Use pool(9) for IPsec acquires too.angelos2001-06-261-12/+19
* Use pool(9) for IPsec policy structures.angelos2001-06-261-6/+15
* Keep the PFKEY sequence number at the TDB, plus a little bit of KNFangelos2001-06-261-8/+12
* KNFangelos2001-06-261-700/+692
* Copyright.angelos2001-06-251-4/+3
* use new timeouts for spd expirations; ho@ okmickey2001-06-241-36/+8
* Trim include files.angelos2001-06-081-8/+2
* Simplify SPD logic (and correct some input cases).angelos2001-06-071-335/+138
* Match prototype.angelos2001-05-301-3/+3
* Correctly free information attached to the policy.angelos2001-05-301-4/+6
* Check that SAs also match on the credentials and the IDs. This meansangelos2001-05-051-23/+30
* Missing splx in error handling.art2001-04-231-1/+3
* Minor changes, preparing for real socket-attached TDBs; also, moreangelos2001-04-141-3/+3
* allow host-to-host negotiations if no gateway has been specified.provos2001-04-101-5/+9
* Move offsetof define into sys/param.hcsapuntz2001-04-061-5/+1