800fe5d178
- prepare for RFC2401bis 64bit sequence number (no behavior change yet)
...
- use hash for SPI-based SAD entry lookup (should be faster, i hope)
- cleanup keydb.c and key.c. key.c is responsible for refcounting secasvar,
keydb.c is responsible for alloc/free.
2003-09-07 15:59:36 +00:00
9329caaf20
typo in log message
2003-08-22 21:50:42 +00:00
c8ebadb000
unifdef -U_IP_VHL
2003-07-22 11:18:24 +00:00
0f09ed48a5
remove trailing \n in panic(). approved perry.
2002-09-27 15:35:29 +00:00
8808abb7b8
correct pointer signedness mixups. sync w/kame
2002-09-11 03:45:44 +00:00
9401012487
KNF - return is not a function. sync w/kame.
2002-09-11 02:46:42 +00:00
ed12d77e43
avoid hardcoded "16" for max AH sum size. use AH_MAXSUMSIZE.
2002-08-09 07:01:21 +00:00
b05ff066a7
whitespace cleanup
2002-06-09 14:43:10 +00:00
4f2ad95259
add RCSIDs
2001-11-13 00:56:55 +00:00
99d25b4e8a
reduce diff with kame. whitespace changes only.
2001-10-15 03:55:37 +00:00
52f2cece9f
tighten AH IPv4 option chasing more. drop too short (< 2) option.
...
sync with kame.
2001-02-21 01:27:58 +00:00
5bc3f3ff96
correct IPv4 option handling.
2001-02-19 04:24:27 +00:00
dcfe05e7c1
fix compilation without INET. fix confusion between ipsecstat and ipsec6stat.
...
sync with kame.
2000-10-02 03:55:41 +00:00
65d37eff7f
correct RFC2367 PF_KEY conformance (SADB_[AE]ALG_xx values and namespaces).
...
sync from kame.
WARNING: need recompilation of setkey(8) and pkgsrc/security/racoon.
(no ipsec-ready netbsd was released as official release)
2000-07-18 14:56:42 +00:00
210a3e2f80
remove unnecessary #include <netkey/key_debug.h>. from kame.
2000-07-06 12:51:39 +00:00
e0b65589f1
sync with more recent kame. cope with malloc failure more gracefully
...
some cosmetics.
2000-06-02 18:20:15 +00:00
fadbd2b29a
cleanup AH/policy processing.
...
- parse IPv6 header by using common function, ip6_{last,next}hdr.
- fix behaivior in multiple AH cases.
make strict boundary checks on mbuf chasing.
(sync with latest kame)
2000-03-21 23:53:30 +00:00
90736ab608
fix include pathname for better rfc2292 compliance.
2000-02-06 12:49:37 +00:00
1a2a1e2b1f
bring in latest KAME ipsec tree.
...
- interop issues in ipcomp is fixed
- padding type (after ESP) is configurable
- key database memory management (need more fixes)
- policy specification is revisited
XXX m->m_pkthdr.rcvif is still overloaded - hope to fix it soon
2000-01-31 14:18:52 +00:00
ec63b40402
remove too much portability code in KAME, to improve readability.
2000-01-06 07:31:07 +00:00
06c350054d
remove reference to in6_systm.h (file itself will be removed afterwords)
1999-07-30 10:35:34 +00:00
cd3a345ea0
RCS ID police.
1999-07-03 21:24:45 +00:00
74d3c214ec
KAME/NetBSD 1.4 SNAP kit, dated 19990628.
...
NOTE: this branch (kame) is used just for refernce. this may not compile
due to multiple reasons.
1999-06-28 06:36:47 +00:00
itojun