| Commit message (Expand) | Author | Age | Files | Lines |
| * | add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4) |  markus | 2012-07-16 | 1 | -5/+21 |
| * | missing PR_NOWAIT |  deraadt | 2010-09-28 | 1 | -2/+2 |
| * | Add support for using IPsec in multiple rdomains. |  reyk | 2010-07-09 | 1 | -7/+19 |
| * | don't reference an item after it has been returned to the pool |  david | 2010-07-02 | 1 | -3/+3 |
| * | Replace pool_get() + bzero() with pool_get(..., PR_ZERO). |  chl | 2010-01-15 | 1 | -6/+3 |
| * | In IPsec acquire mode, if the flow was configured for the "any" |  bluhm | 2009-01-27 | 1 | -13/+5 |
| * | Convert timeout_add() calls using multiples of hz to timeout_add_sec() |  blambert | 2008-09-10 | 1 | -2/+2 |
| * | Assign the struct size to sin6_len instead of sin6_family. |  bluhm | 2008-07-22 | 1 | -2/+2 |
| * | 0 -> PR_NOWAIT (which is defined as 0) in pool_get |  blambert | 2008-06-11 | 1 | -2/+2 |
| * | more rtrequest() to rtrequest1() replacement. |  claudio | 2008-05-09 | 1 | -6/+9 |
| * | since the |  henning | 2007-09-01 | 1 | -1/+2 |
| * | Consistently spell FALLTHROUGH to appease lint. |  jsg | 2007-02-14 | 1 | -5/+5 |
| * | adjust functions dealing with the routing table to take a table ID as |  henning | 2006-06-16 | 1 | -2/+2 |
| * | miscellaneous typo fixes: |  jfb | 2005-02-17 | 1 | -2/+2 |
| * | First step towards more sane time handling in the kernel -- this changes |  tholo | 2004-06-21 | 1 | -5/+5 |
| * | make it possble to use IPsec over link-local address (policy table uses |  itojun | 2004-06-21 | 1 | -3/+3 |
| * | simpler ipsp_aux_match() API; ok henning, hshoexer |  markus | 2004-04-14 | 1 | -17/+14 |
| * | Check for undersized IP header, found by jbm@, ok angelos@ |  dhartmei | 2002-11-12 | 1 | -1/+9 |
| * | whitespace |  itojun | 2002-06-09 | 1 | -2/+2 |
| * | Per-socket policies and authentication. Finally. |  angelos | 2002-05-31 | 1 | -63/+382 |
| * | Search the correct ACQUIRE list --- shifflett@nps.navy.mil |  angelos | 2002-02-18 | 1 | -2/+2 |
| * | It looks like there has been one crack smoking and a few cut and pastes. |  art | 2002-01-23 | 1 | -3/+3 |
| * | Pool deals fairly well with physical memory shortage, but it doesn't deal |  art | 2002-01-23 | 1 | -5/+3 |
| * | at least ; required after label or case; openbsd@davidkrause.com |  deraadt | 2002-01-02 | 1 | -1/+2 |
| * | Reset the error return value if the cached TDB matches the |  angelos | 2001-09-24 | 1 | -1/+2 |
| * | When the outgoing socket has BYPASS set, don't bother calling the |  angelos | 2001-08-21 | 1 | -5/+4 |
| * | bcmp done wrong, detected at bakeoff. Hint: always use |  niklas | 2001-08-15 | 1 | -2/+2 |
| * | Don't drop packets if we're using an ACQUIRE policy and some error |  angelos | 2001-08-06 | 1 | -15/+12 |
| * | Use TAILQ_FOREACH() instead of hand-crafted for loops. |  angelos | 2001-06-27 | 1 | -5/+3 |
| * | When determining whether there's a pending acquire wrt a policy, look |  angelos | 2001-06-27 | 1 | -4/+4 |
| * | Attach IPsec acquire state to policy entries, and relevant cleanups. |  angelos | 2001-06-27 | 1 | -3/+15 |
| * | Don't cache packets that hit policies -- we'll do that at the PCB for |  angelos | 2001-06-27 | 1 | -91/+18 |
| * | Use the ACQUIRE sequence number to "wake up" acquire state kept and |  angelos | 2001-06-26 | 1 | -73/+45 |
| * | ifdef out some currently unused code |  angelos | 2001-06-26 | 1 | -1/+3 |
| * | Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ing |  angelos | 2001-06-26 | 1 | -75/+69 |
| * | Use pool(9) for IPsec acquires too. |  angelos | 2001-06-26 | 1 | -12/+19 |
| * | Use pool(9) for IPsec policy structures. |  angelos | 2001-06-26 | 1 | -6/+15 |
| * | Keep the PFKEY sequence number at the TDB, plus a little bit of KNF |  angelos | 2001-06-26 | 1 | -8/+12 |
| * | KNF |  angelos | 2001-06-26 | 1 | -700/+692 |
| * | Copyright. |  angelos | 2001-06-25 | 1 | -4/+3 |
| * | use new timeouts for spd expirations; ho@ ok |  mickey | 2001-06-24 | 1 | -36/+8 |
| * | Trim include files. |  angelos | 2001-06-08 | 1 | -8/+2 |
| * | Simplify SPD logic (and correct some input cases). |  angelos | 2001-06-07 | 1 | -335/+138 |
| * | Match prototype. |  angelos | 2001-05-30 | 1 | -3/+3 |
| * | Correctly free information attached to the policy. |  angelos | 2001-05-30 | 1 | -4/+6 |
| * | Check that SAs also match on the credentials and the IDs. This means |  angelos | 2001-05-05 | 1 | -23/+30 |
| * | Missing splx in error handling. |  art | 2001-04-23 | 1 | -1/+3 |
| * | Minor changes, preparing for real socket-attached TDBs; also, more |  angelos | 2001-04-14 | 1 | -3/+3 |
| * | allow host-to-host negotiations if no gateway has been specified. |  provos | 2001-04-10 | 1 | -5/+9 |
| * | Move offsetof define into sys/param.h |  csapuntz | 2001-04-06 | 1 | -5/+1 |