Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/sys/netipsec/files.netipsec

25 lines
685 B
Plaintext
Raw Permalink Normal View History

Rename enc_xform_rijndael128 -> enc_xform_aes. Update netipsec dependency.
2020-06-30 07:14:55 +03:00
# $Id: files.netipsec,v 1.15 2020/06/30 04:14:55 riastradh Exp $
Commit initial NetBSD port of the OpenCrypto Framework (OCF). This code is derived from Sam Leffler's FreeBSD port of OCF, which is in turn a port of Angelos Keromytis's OpenBSD work. Credit to Sam and Angelos, any blame for the NetBSD port to me.
2003-07-26 01:12:39 +04:00
#
#
Rename enc_xform_rijndael128 -> enc_xform_aes. Update netipsec dependency.
2020-06-30 07:14:55 +03:00
defflag opt_ipsec.h IPSEC: opencrypto, aes
defflag IPSEC_DEBUG
2007-11-17 00:15:20 +03:00
defflag opt_ipsec.h IPSEC_DEBUG
add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by christos@n.o, joerg@n.o and ozaki-r@n.o, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html
2018-01-10 13:56:30 +03:00
defflag opt_ipsec.h IPSEC_TX_TOS_CLEAR
Commit initial NetBSD port of the OpenCrypto Framework (OCF). This code is derived from Sam Leffler's FreeBSD port of OCF, which is in turn a port of Angelos Keromytis's OpenBSD work. Credit to Sam and Angelos, any blame for the NetBSD port to me.
2003-07-26 01:12:39 +04:00
IPSEC has not come in two speeds for a long time now (IPSEC == kame, FAST_IPSEC). Make everything refer to IPSEC to avoid confusion.
2013-06-05 23:01:26 +04:00
file netipsec/ipsec.c ipsec needs-flag
file netipsec/ipsec_input.c ipsec
file netipsec/ipsec_mbuf.c ipsec
file netipsec/ipsec_output.c ipsec
file netipsec/xform_ah.c ipsec
file netipsec/xform_esp.c ipsec
file netipsec/xform_ipcomp.c ipsec
file netipsec/xform_ipip.c ipsec
file netipsec/ipsec_netbsd.c ipsec
separate netkey/key* and netipsec/key*
2003-09-20 09:14:41 +04:00
IPSEC has not come in two speeds for a long time now (IPSEC == kame, FAST_IPSEC). Make everything refer to IPSEC to avoid confusion.
2013-06-05 23:01:26 +04:00
file netipsec/key.c ipsec
file netipsec/key_debug.c ipsec
file netipsec/keysock.c ipsec
Initial commit of a port of the FreeBSD implementation of RFC 2385 (MD5 signatures for TCP, as used with BGP). Credit for original FreeBSD code goes to Bruce M. Simpson, with FreeBSD sponsorship credited to sentex.net. Shortening of the setsockopt() name attributed to Vincent Jardin. This commit is a minimal, working version of the FreeBSD code, as MFC'ed to FreeBSD-4. It has received minimal testing with a ttcp modified to set the TCP-MD5 option; BMS's additions to tcpdump-current (tcpdump -M) confirm that the MD5 signatures are correct. Committed as-is for further testing between a NetBSD BGP speaker (e.g., quagga) and industry-standard BGP speakers (e.g., Cisco, Juniper). NOTE: This version has two potential flaws. First, I do see any code that verifies recieved TCP-MD5 signatures. Second, the TCP-MD5 options are internally padded and assumed to be 32-bit aligned. A more space-efficient scheme is to pack all TCP options densely (and possibly unaligned) into the TCP header ; then do one final padding to a 4-byte boundary. Pre-existing comments note that accounting for TCP-option space when we add SACK is yet to be done. For now, I'm punting on that; we can solve it properly, in a way that will handle SACK blocks, as a separate exercise. In case a pullup to NetBSD-2 is requested, this adds sys/netipsec/xform_tcp.c ,and modifies: sys/net/pfkeyv2.h,v 1.15 sys/netinet/files.netinet,v 1.5 sys/netinet/ip.h,v 1.25 sys/netinet/tcp.h,v 1.15 sys/netinet/tcp_input.c,v 1.200 sys/netinet/tcp_output.c,v 1.109 sys/netinet/tcp_subr.c,v 1.165 sys/netinet/tcp_usrreq.c,v 1.89 sys/netinet/tcp_var.h,v 1.109 sys/netipsec/files.netipsec,v 1.3 sys/netipsec/ipsec.c,v 1.11 sys/netipsec/ipsec.h,v 1.7 sys/netipsec/key.c,v 1.11 share/man/man4/tcp.4,v 1.16 lib/libipsec/pfkey.c,v 1.20 lib/libipsec/pfkey_dump.c,v 1.17 lib/libipsec/policy_token.l,v 1.8 sbin/setkey/parse.y,v 1.14 sbin/setkey/setkey.8,v 1.27 sbin/setkey/token.l,v 1.15 Note that the preceding two revisions to tcp.4 will be required to cleanly apply this diff.
2004-04-26 02:25:03 +04:00
IPSEC has not come in two speeds for a long time now (IPSEC == kame, FAST_IPSEC). Make everything refer to IPSEC to avoid confusion.
2013-06-05 23:01:26 +04:00
file netipsec/xform_tcp.c ipsec & tcp_signature
add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by christos@n.o, joerg@n.o and ozaki-r@n.o, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html
2018-01-10 13:56:30 +03:00
file netipsec/ipsecif.c ipsec & ipsecif