92e64a4a0d
sync with almost-latest KAME IPsec. full changelog would be too big
...
to mention here. notable changes are like below.
kernel:
- make PF_KEY kernel interface more robust against broken input stream.
it includes complete internal structure change in sys/netkey/key.c.
- remove non-RFC compliant change in PF_KEY API, in particular,
in struct sadb_msg. we cannot just change these standard structs.
sadb_x_sa2 is introduced instead.
- remove prototypes for pfkey_xx functions from /usr/include/net/pfkeyv2.h.
these functions are not supplied in /usr/lib.
setkey(8):
- get/delete does not require "-m mode" (ignored with warning, if you
specify it)
- spddelete takes direction specification
2000-06-12 10:40:37 +00:00
005442ad58
typo. FreeBSD PR 18547.
2000-05-15 16:26:16 +00:00
847f94a69d
remove ordering constraint between -h and -x.
...
notified by: hubertf
2000-04-16 16:15:59 +00:00
320de3ec61
note that this is related to IPsec in the "name" section.
...
This is intended to make this manpage to show up on "apropos ipsec"
2000-04-11 00:11:46 +00:00
a27d96b078
sync with latest kame.
...
- fix examples and wording in setkey.8
- allow scoped IPv6 notation (kernel side may not be really ready for this)
2000-03-15 00:24:30 +00:00
9034310694
avoid shlib reference for pfkey_*. compile them on our own.
2000-03-13 21:04:07 +00:00
db0eae77a6
Fix replay window size as default to 0 when manual setting.
...
It means responder doesn't check sequence number.
(sync with latest kame)
2000-03-06 22:19:27 +00:00
fdf456b5f0
Nuke gratuitous setting of BINOWN and BINGRP.
2000-02-25 08:52:03 +00:00
387cae5e16
fix include file path (IPv6 related).
2000-02-06 11:21:45 +00:00
6b2922d06b
catch up with latest libipsec/kernel.
2000-01-31 14:22:41 +00:00
22dc13ab4a
improve description on ipcomp case. (sync'ed with kAME)
1999-09-07 06:49:37 +00:00
d65340456a
do not use tbl for formatting.
...
From: "Heiko W.Rupp" <hwr@netbsd.org>
1999-08-08 13:27:30 +00:00
247bd5d560
Remove "parse.c" and "parse.h" during "make cleandir".
1999-07-10 11:31:28 +00:00
22ece3e4cd
add NetBSD RCS ID. retain original RCS ID (without $).
1999-07-06 13:13:03 +00:00
5e5766862a
comment out rc5-cbc (is removed on KAME on NetBSD-current for
...
possible patent twist)
From: frank@wins.uva.nl (Frank van der Linden)
1999-07-03 11:58:12 +00:00
961c134c62
s/.Os KAME/.Os/
1999-07-02 17:45:00 +00:00
c2689aaa05
setkey: configure IPsec keys to the kernel key table
...
(not subject to export control as itself does not contain crypto)
1999-07-02 17:41:23 +00:00
itojun