wireguard-openbsd - WireGuard implementation for the OpenBSD kernel

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Missed a DPRINTF().	angelos	2001-05-28	1	-2/+1
\|
*	Use packet tags to detect loops, same as ip_output()	angelos	2001-05-28	1	-9/+29
\|
*	Use m_tag_init() to initialize new mbuf m_pkthdr fields, rather than	angelos	2001-05-26	1	-2/+2
\| \| \| \|	having to change it every time.
*	Convert from tdbi to packet tags.	angelos	2001-05-20	1	-2/+2
\|
*	No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok)	ho	2001-05-16	1	-7/+2
\|
*	Minor changes, preparing for real socket-attached TDBs; also, more	angelos	2001-04-14	1	-2/+3
\| \| \| \|	information will be stored in the TDB. ok ho@ provos@
*	disallow userland programs from specifying addresses with IPV6_PKTINFO	itojun	2001-04-11	1	-2/+9
\| \| \| \| \| \| \|	setsockopt, if: - the address is not verified by DAD (= not ready) - the address is an anycast address (= not permitted as source) sync with kame
*	enable FAKE_LOOPBACK_IF case by default.	itojun	2001-03-30	1	-24/+10
\| \| \| \| \| \| \| \| \|	now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame.
*	Allow tdbi's to appear in mbufs throughout the stack; this allows	angelos	2001-03-28	1	-11/+16
\| \| \| \| \| \| \| \| \|	security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs.
*	re-initialize mopt in ip6_insert_jumboopt(). sync with kame	itojun	2001-03-25	1	-3/+3
\| \| \| \|	From: csapuntz@stanford.edu
*	set rmx_mtu to L2 interface mtu, instead of 0, on mtudisc timeout.	itojun	2001-03-21	1	-3/+6
\| \| \| \|	ip6_output() change is for safety. sync with kame
*	add/clearify spl for ipsec6. sync with kame. reviewed by angelos.	itojun	2001-03-13	1	-3/+4
\|
*	get rid of #ifdef IPV6FIREWALL (never used, will never be used)	itojun	2001-02-16	1	-53/+1
\|
*	cosmetic/comment sync with kame	itojun	2001-02-16	1	-3/+2
\|
*	sync whitespace/comment with kame. to help merge tasks	itojun	2001-02-16	1	-1/+5
\|
*	kill register declarations. to sync with kame better.	itojun	2001-02-16	1	-11/+11
\|
*	witch raw ip6 socket code from NRL to kame.	itojun	2001-02-08	1	-3/+3
\| \| \| \|	makes upgrades/code sharing much easier.
*	bad semicolon after "if" conditional.	itojun	2001-02-06	1	-2/+2
\|
*	allow changing number of loopbacks in ukc.	mickey	2001-02-06	1	-8/+4
\| \| \| \| \| \|	change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok
*	avoid panic when packet to nonexistent link-local address is issued.	itojun	2001-02-02	1	-3/+16
\| \| \| \|	kame 1.151 -> 1.152.
*	nuke inp_flags bits for controlling IPv4 mapped address.	itojun	2000-10-11	1	-12/+1
\| \| \| \| \|	we don't support IPv4 mapped address, and there are inconsistent bit manipulation code so it's safer to nuke them.
*	Added files, and IPv6-IPsec update.	angelos	2000-09-19	1	-20/+4
\|
*	repair IPv6 multicasting. INP_IPV6_MCAST is necessary.	itojun	2000-09-16	1	-1/+12
\| \| \| \|	(i will try to remove this flag bit later)
*	- upgrade icmp6 node information query support to 06 draft.	itojun	2000-08-19	1	-11/+37
\| \| \| \| \|	- pedant: possible alignment issue in ALIGN > 8 arch (should be okay for now) (sync with kame)
*	confirmed interop of IPv6 AH with KAME (both global and scoped addr).	itojun	2000-06-20	1	-8/+1
\| \| \| \| \| \| \| \|	remove restriction on scoped IPv6 address. TODO: confirm it with other IPv6 AH implementation. since we use very similar logic between KAME IPv6 AH and OpenBSD IPv6 AH, it is possible that both side is making the same mistake or whatever
*	initialize hoplimit field properly on ipsec6 case	itojun	2000-06-20	1	-1/+26
\|
*	IPv6 IPsec, outbound direction.	itojun	2000-06-19	1	-51/+99
\| \| \| \| \| \|	restriction: if there's any extension header (except fragment) and outbound packet matches tdb, we can't encrypt it. packet will not go out of the node (dropped).
*	allow IPsec-related get/setsockopt on IPv6 socket. due to number conflict	itojun	2000-06-18	1	-26/+183
\| \| \| \| \| \| \|	they must be IPV6_xx instead of IP_xx. actually, since in_ctloutput() does not check address family of inpcb, getsockopt(IPPROTO_IP, IP_xx) may work - never tested this.
*	correct indentation for IPV6_PORTRANGE	itojun	2000-06-18	1	-22/+22
\|
*	deep-copy ip6 header on ip6_mloopback, to avoid overwriting cluster mbuf.	itojun	2000-06-03	1	-12/+47
\| \| \| \| \| \|	correct frag header append operation. some cosmetic (like do {} while (0) to multiline macro) (sync with kame)
*	correct "telnet fe80::1%lo0".	itojun	2000-05-19	1	-3/+3
\|
*	never forward packet with link-local address.	itojun	2000-05-19	1	-35/+63
\| \| \| \| \| \|	experimental support for new loopback packet handling (with FAKE_LOOPBACK_IF, rcvif will be set to real outgoing interface, not the loopback, to honor scope) sync with kame.
*	NULL != 0. from netbsd-current.	itojun	2000-05-19	1	-2/+2
\|
*	fix include file path related to ip6.	itojun	2000-02-07	1	-3/+3
\|
*	add missing IPV6_PORTRANGE case.	itojun	1999-12-20	1	-1/+2
\|
*	Remove remaining unnecessary ifdefs (itojun will hate me for this :-)	angelos	1999-12-10	1	-422/+8
\|
*	bring in KAME IPv6 code, dated 19991208.	itojun	1999-12-08	1	-0/+2534
	replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).