#
d24cb249 |
| 21-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
stop use of NI_WITHSCOPEID. it was deprecated.
Obtained from: KAME
|
#
b42ac57f |
| 13-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- support AES counter mode for ESP. - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing.
Obtained from: KAME
|
#
c65ee7c7 |
| 13-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- support AES XCBC MAC for AH - correct SADB_X_AALG_RIPEMD160HMAC to 8
Obtained from: KAME
|
#
492528c0 |
| 12-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- RIPEMD160 support - pass size arg to ah->result (avoid assuming result buffer size)
Obtained from: KAME
|
Revision tags: release/5.1.0_cvs, release/5.1.0 |
|
#
296e054f |
| 17-Apr-2003 |
Munechika SUMIKAWA <sumikawa@FreeBSD.org> |
Buffer size is not enough in the previous commit. Use 128.
Pointed out by: nectar MFC after: 1 week
|
#
6089e562 |
| 16-Apr-2003 |
Munechika SUMIKAWA <sumikawa@FreeBSD.org> |
Make character buffer more bigger.
Obtained from: KAME MFC after: 1 week
|
Revision tags: release/4.8.0_cvs, release/4.8.0, release/5.0.0_cvs, release/5.0.0, release/4.7.0_cvs, release/4.6.2_cvs, release/4.6.2, release/4.6.1, release/4.6.0_cvs |
|
#
69160b1e |
| 22-Mar-2002 |
David E. O'Brien <obrien@FreeBSD.org> |
Remove __P() usage.
|
Revision tags: release/4.5.0_cvs, release/4.4.0_cvs |
|
#
46a50f4e |
| 30-Sep-2001 |
Matthew Dillon <dillon@FreeBSD.org> |
Add __FBSDID()s to libipsec
|
#
232bdaf6 |
| 06-Aug-2001 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
printed current sequence number of the SA. accordingly, changed into sadb_x_sa2_sequence from sadb_x_sa2_reserved3 in the sadb_x_sa2 structure. Also the output of setkey is changed. sequence numbe
printed current sequence number of the SA. accordingly, changed into sadb_x_sa2_sequence from sadb_x_sa2_reserved3 in the sadb_x_sa2 structure. Also the output of setkey is changed. sequence number of the sadb is replaced to the end of the output.
Obtained from: KAME
show more ...
|
#
33841545 |
| 11-Jun-2001 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
Sync with recent KAME. This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge.
TODO:
Sync with recent KAME. This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge.
TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT.
Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks
show more ...
|
Revision tags: release/4.3.0_cvs, release/4.3.0, release/4.2.0, release/4.1.1_cvs, release/4.1.0 |
|
#
3c62e87a |
| 04-Jul-2000 |
Jun-ichiro itojun Hagino <itojun@FreeBSD.org> |
synchronize with latest kame tree.
behavior change: policy syntax was changed. you may need to update your setkey(8) configuration files.
|
Revision tags: release/3.5.0_cvs, release/4.0.0_cvs |
|
#
9a4365d0 |
| 06-Jan-2000 |
Yoshinobu Inoue <shin@FreeBSD.org> |
libipsec and IPsec related apps. (and some KAME related man pages)
Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project
|
Revision tags: release/10.1.0, release/9.3.0, release/10.0.0, release/9.2.0, release/8.4.0, release/9.1.0, release/8.3.0_cvs, release/8.3.0, release/9.0.0, release/7.4.0_cvs, release/8.2.0_cvs, release/7.4.0, release/8.2.0, release/8.1.0_cvs, release/8.1.0, release/7.3.0_cvs, release/7.3.0, release/8.0.0_cvs, release/8.0.0, release/7.2.0_cvs, release/7.2.0, release/7.1.0_cvs, release/7.1.0, release/6.4.0_cvs, release/6.4.0, release/7.0.0_cvs, release/7.0.0, release/6.3.0_cvs, release/6.3.0 |
|
#
8409aedf |
| 01-Jul-2007 |
George V. Neville-Neil <gnn@FreeBSD.org> |
Commit IPv6 support for FAST_IPSEC to the tree. This commit includes all remaining changes for the time being including user space updates.
Submitted by: bz Approved by: re
|
#
559d3390 |
| 09-May-2007 |
George V. Neville-Neil <gnn@FreeBSD.org> |
Integrate the Camellia Block Cipher. For more information see RFC 4132 and its bibliography.
Submitted by: Tomoyuki Okazaki <okazaki at kick dot gr dot jp> MFC after: 1 month
|
Revision tags: release/6.2.0_cvs, release/6.2.0, release/5.5.0_cvs, release/5.5.0, release/6.1.0_cvs, release/6.1.0, release/6.0.0_cvs, release/6.0.0, release/5.4.0_cvs, release/5.4.0, release/4.11.0_cvs, release/4.11.0, release/5.3.0_cvs, release/5.3.0, release/4.10.0_cvs, release/4.10.0, release/5.2.1_cvs, release/5.2.1 |
|
#
1922fd12 |
| 11-Feb-2004 |
Bruce M Simpson <bms@FreeBSD.org> |
Initial import of RFC 2385 (TCP-MD5) digest support.
This is the second of two commits; bring in the userland support to finish.
Teach libipsec and setkey about the tcp-md5 class of security associ
Initial import of RFC 2385 (TCP-MD5) digest support.
This is the second of two commits; bring in the userland support to finish.
Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function.
Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production.
Sponsored by: sentex.net
show more ...
|
Revision tags: release/5.2.0_cvs, release/5.2.0 |
|
#
bd9f52d5 |
| 05-Nov-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- plug memory leak. - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the
- plug memory leak. - fixed a length of the sadb extension in the case of pfkey_send_x5(). - used getprotobynumber() for printing a upper layer protocol name. - modified the output format against the change of the setkey syntax about a icmp6 type/code. - don't enumerate reserved fields. use memset.
Obtained from: KAME
show more ...
|
Revision tags: release/4.9.0_cvs, release/4.9.0 |
|
#
9713f5c1 |
| 26-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- errx() doesn't need `\n'. - use %u for unsigned variable.
Obtained from: KAME
|
#
d24cb249 |
| 21-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
stop use of NI_WITHSCOPEID. it was deprecated.
Obtained from: KAME
|
#
b42ac57f |
| 13-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- support AES counter mode for ESP. - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing.
Obtained from: KAME
|
#
c65ee7c7 |
| 13-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- support AES XCBC MAC for AH - correct SADB_X_AALG_RIPEMD160HMAC to 8
Obtained from: KAME
|
#
492528c0 |
| 12-Oct-2003 |
Hajimu UMEMOTO <ume@FreeBSD.org> |
- RIPEMD160 support - pass size arg to ah->result (avoid assuming result buffer size)
Obtained from: KAME
|
Revision tags: release/5.1.0_cvs, release/5.1.0 |
|
#
296e054f |
| 17-Apr-2003 |
Munechika SUMIKAWA <sumikawa@FreeBSD.org> |
Buffer size is not enough in the previous commit. Use 128.
Pointed out by: nectar MFC after: 1 week
|
#
6089e562 |
| 16-Apr-2003 |
Munechika SUMIKAWA <sumikawa@FreeBSD.org> |
Make character buffer more bigger.
Obtained from: KAME MFC after: 1 week
|
Revision tags: release/4.8.0_cvs, release/4.8.0, release/5.0.0_cvs, release/5.0.0, release/4.7.0_cvs, release/4.6.2_cvs, release/4.6.2, release/4.6.1, release/4.6.0_cvs |
|
#
69160b1e |
| 22-Mar-2002 |
David E. O'Brien <obrien@FreeBSD.org> |
Remove __P() usage.
|
Revision tags: release/4.5.0_cvs, release/4.4.0_cvs |
|
#
46a50f4e |
| 30-Sep-2001 |
Matthew Dillon <dillon@FreeBSD.org> |
Add __FBSDID()s to libipsec
|