Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
698e9d4d95
NetBSD/sys/netipsec/files.netipsec

24 lines
738 B
Plaintext
Raw Normal View History

remove KAME IPSEC, replaced by FAST_IPSEC
2012-03-23 00:34:37 +04:00
# $Id: files.netipsec,v 1.10 2012/03/22 20:34:42 drochner Exp $
Commit initial NetBSD port of the OpenCrypto Framework (OCF). This code is derived from Sam Leffler's FreeBSD port of OCF, which is in turn a port of Angelos Keromytis's OpenBSD work. Credit to Sam and Angelos, any blame for the NetBSD port to me.
2003-07-26 01:12:39 +04:00
#
#
Split opencrypto configuration into an attribute, usable by inkernel clients, and a pseudo-device for userspace access. The attribute is named `opencrypto'. The pseudo-device is renamed to "crypto", which has a dependency on "opencrypto". The sys/conf/majors entry and pseudo-device attach entrypoint are updated to match the new pseudo-device name. Fast IPsec (sys/netipsec/files.ipsec) now lists a dependency on the "opencrypto" attribute. Drivers for crypto accelerators (ubsec, hifn775x) also pull in opencrypto, as providers of opencrypto transforms.
2003-12-31 19:44:26 +03:00
defflag opt_ipsec.h FAST_IPSEC: opencrypto
Make FAST_IPSEC the default IPSEC implementation which is built into the kernel if the "IPSEC" kernel option is given. The old implementation is still available as KAME_IPSEC. Do some minimal manpage adjustment -- kame_ipsec(4) is a copy of the old ipsec(4) and the latter is now a copy of fast_ipsec(4).
2012-01-09 19:16:30 +04:00
defflag opt_ipsec.h IPSEC: FAST_IPSEC
remove KAME IPSEC, replaced by FAST_IPSEC
2012-03-23 00:34:37 +04:00
defflag opt_ipsec.h IPSEC_NAT_T
defflag IPSEC_DEBUG
2007-11-17 00:15:20 +03:00
defflag opt_ipsec.h IPSEC_DEBUG
Commit initial NetBSD port of the OpenCrypto Framework (OCF). This code is derived from Sam Leffler's FreeBSD port of OCF, which is in turn a port of Angelos Keromytis's OpenBSD work. Credit to Sam and Angelos, any blame for the NetBSD port to me.
2003-07-26 01:12:39 +04:00
Move the preprocessor/config feature-test macro (FAST_IPSEC) into opt_ipsec.h, to simplify changes elsehere. Add dependency on new file netipec/ipsec_netbsd.c, for some NetBSD-specific required functionality (e.g., differences in ctl-input keydb handling).
2003-08-07 00:29:00 +04:00
file netipsec/ipsec.c fast_ipsec needs-flag
Commit initial NetBSD port of the OpenCrypto Framework (OCF). This code is derived from Sam Leffler's FreeBSD port of OCF, which is in turn a port of Angelos Keromytis's OpenBSD work. Credit to Sam and Angelos, any blame for the NetBSD port to me.
2003-07-26 01:12:39 +04:00
file netipsec/ipsec_input.c fast_ipsec
file netipsec/ipsec_mbuf.c fast_ipsec
file netipsec/ipsec_output.c fast_ipsec
file netipsec/xform_ah.c fast_ipsec
file netipsec/xform_esp.c fast_ipsec
file netipsec/xform_ipcomp.c fast_ipsec
file netipsec/xform_ipip.c fast_ipsec
Move the preprocessor/config feature-test macro (FAST_IPSEC) into opt_ipsec.h, to simplify changes elsehere. Add dependency on new file netipec/ipsec_netbsd.c, for some NetBSD-specific required functionality (e.g., differences in ctl-input keydb handling).
2003-08-07 00:29:00 +04:00
file netipsec/ipsec_netbsd.c fast_ipsec
separate netkey/key* and netipsec/key*
2003-09-20 09:14:41 +04:00
file netipsec/key.c fast_ipsec
file netipsec/key_debug.c fast_ipsec
file netipsec/keysock.c fast_ipsec
Initial commit of a port of the FreeBSD implementation of RFC 2385 (MD5 signatures for TCP, as used with BGP). Credit for original FreeBSD code goes to Bruce M. Simpson, with FreeBSD sponsorship credited to sentex.net. Shortening of the setsockopt() name attributed to Vincent Jardin. This commit is a minimal, working version of the FreeBSD code, as MFC'ed to FreeBSD-4. It has received minimal testing with a ttcp modified to set the TCP-MD5 option; BMS's additions to tcpdump-current (tcpdump -M) confirm that the MD5 signatures are correct. Committed as-is for further testing between a NetBSD BGP speaker (e.g., quagga) and industry-standard BGP speakers (e.g., Cisco, Juniper). NOTE: This version has two potential flaws. First, I do see any code that verifies recieved TCP-MD5 signatures. Second, the TCP-MD5 options are internally padded and assumed to be 32-bit aligned. A more space-efficient scheme is to pack all TCP options densely (and possibly unaligned) into the TCP header ; then do one final padding to a 4-byte boundary. Pre-existing comments note that accounting for TCP-option space when we add SACK is yet to be done. For now, I'm punting on that; we can solve it properly, in a way that will handle SACK blocks, as a separate exercise. In case a pullup to NetBSD-2 is requested, this adds sys/netipsec/xform_tcp.c ,and modifies: sys/net/pfkeyv2.h,v 1.15 sys/netinet/files.netinet,v 1.5 sys/netinet/ip.h,v 1.25 sys/netinet/tcp.h,v 1.15 sys/netinet/tcp_input.c,v 1.200 sys/netinet/tcp_output.c,v 1.109 sys/netinet/tcp_subr.c,v 1.165 sys/netinet/tcp_usrreq.c,v 1.89 sys/netinet/tcp_var.h,v 1.109 sys/netipsec/files.netipsec,v 1.3 sys/netipsec/ipsec.c,v 1.11 sys/netipsec/ipsec.h,v 1.7 sys/netipsec/key.c,v 1.11 share/man/man4/tcp.4,v 1.16 lib/libipsec/pfkey.c,v 1.20 lib/libipsec/pfkey_dump.c,v 1.17 lib/libipsec/policy_token.l,v 1.8 sbin/setkey/parse.y,v 1.14 sbin/setkey/setkey.8,v 1.27 sbin/setkey/token.l,v 1.15 Note that the preceding two revisions to tcp.4 will be required to cleanly apply this diff.
2004-04-26 02:25:03 +04:00
xform_tcp.c is needed only with FAST_IPSEC
2004-04-26 07:50:57 +04:00
file netipsec/xform_tcp.c fast_ipsec & tcp_signature
Reference in New Issue Copy Permalink