Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
226,050 Commits 606 Branches 0 Tags 3.1 GiB
c0559412e4
Commit Graph

13 Commits

Author SHA1 Message Date
christos
213e873fd6 PR/47886: Dr. Wolfgang Stukenbrock: IPSEC_NAT_T enabled kernels may access 
outdated pointers and pass ESP data to UPD-sockets.
While here, simplify the code and remove the IPSEC_NAT_T option; always
compile nat-traversal in so that it does not bitrot.
 2013-06-04 22:47:37 +00:00
drochner
a01fe2e22b g/c unused struct member 2012-08-29 20:37:50 +00:00
drochner
0d96157461 protect "union sockaddr_union" from being defined twice by a CPP symbol 
(copied from FreeBSD), allows coexistence of (FAST_)IPSEC and pf
 2012-01-11 14:37:45 +00:00
drochner
fe35ba177e g/c remainders of IV handling in pfkey code -- this is done in 
opencrypto now
 2011-05-23 15:17:25 +00:00
drochner
06d326df43 use time_t rather than long for timestamps 2011-05-16 10:02:30 +00:00
drochner
909a8e8346 more "const" 2011-02-18 19:56:01 +00:00
spz
d4446651db trivial comment typo 2010-08-28 07:16:51 +00:00
degroote
a382db0aa9 Ansify 
Remove useless extern
bzero -> memset, bcopy -> memcpy

No functionnal changes
 2007-07-07 18:38:22 +00:00
degroote
4ddfe916ff Add support for options IPSEC_NAT_T (RFC 3947 and 3948) for fast_ipsec(4). 
No objection on tech-net@
 2007-06-27 20:38:32 +00:00
degroote
c252f603d0 Fix fallout from caddr_t changes 2007-03-04 19:54:48 +00:00
christos
53524e44ef Kill caddr_t; there will be some MI fallout, but it will be fixed shortly. 2007-03-04 05:59:00 +00:00
elad
adf9419c9a Multiple inclusion protection, as suggested by christos@ on tech-kern@ 
few days ago.
 2005-12-10 23:44:08 +00:00
jonathan
740290313e Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 
Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the
OpenCryptoFramework (and thus hardware crypto accelerators) and
numerous detailed performance improvements.

This import is (aside from SPL-level names) the FreeBSD source,
imported ``as-is'' as a historical snapshot, for future maintenance
and comparison against the FreeBSD source.  For now, several minor
kernel-API differences are hidden by macros a shim file, ipsec_osdep.h,
which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
 2003-08-13 20:06:49 +00:00