drochner 00cbca9cf5 After IPSEC input processing, pass a decoded/authenticated IPv4 packet ... to upper layers through the IP protosw, as done for IPv6. Before it was reinjected into the IP netisr queue which caused more overhead and caused artefacts like double IP option processing. Works well for me, should get more testing and review.		2012-01-25 21:58:10 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
files.netipsec	Make FAST_IPSEC the default IPSEC implementation which is built	2012-01-09 15:16:30 +00:00
ipcomp_var.h
ipcomp.h
ipip_var.h
ipsec6.h	more "const"	2011-06-09 19:54:18 +00:00
ipsec_input.c	After IPSEC input processing, pass a decoded/authenticated IPv4 packet	2012-01-25 21:58:10 +00:00
ipsec_mbuf.c	remove redundant declaration	2011-05-16 10:05:23 +00:00
ipsec_netbsd.c	Retire varargs.h support. Move machine/stdarg.h logic into MI	2011-07-17 20:54:30 +00:00
ipsec_osdep.h	add missing rnd_extract->cprng_fast conversion, fixes build of	2011-11-29 13:15:27 +00:00
ipsec_output.c	add patch from Arnaud Degroote to handle IPv6 extended options with	2012-01-10 20:01:56 +00:00
ipsec_private.h
ipsec_var.h
ipsec.c	more "const"	2011-06-09 19:54:18 +00:00
ipsec.h	more IPSEC header cleanup: don't install unneeded headers to userland,	2012-01-06 14:17:10 +00:00
key_debug.c	g/c remainders of IV handling in pfkey code -- this is done in	2011-05-23 15:17:25 +00:00
key_debug.h	declare input to kdebug_*() functions which dump structures	2011-02-21 22:21:40 +00:00
key_var.h
key.c	allow the ESP fragment length in the NAT-T case to be reported back	2012-01-09 15:42:08 +00:00
key.h	more "const"	2011-06-09 19:54:18 +00:00
keydb.h	protect "union sockaddr_union" from being defined twice by a CPP symbol	2012-01-11 14:37:45 +00:00
keysock.c	Retire varargs.h support. Move machine/stdarg.h logic into MI	2011-07-17 20:54:30 +00:00
keysock.h
Makefile	more IPSEC header cleanup: don't install unneeded headers to userland,	2012-01-06 14:17:10 +00:00
xform_ah.c	Make sure the mbufs in the input path (only the parts which we are going	2012-01-25 20:31:23 +00:00
xform_esp.c	Make sure the mbufs in the input path (only the parts which we are going	2012-01-25 20:31:23 +00:00
xform_ipcomp.c	Make sure the mbufs in the input path (only the parts which we are going	2012-01-25 20:31:23 +00:00
xform_ipip.c	Retire varargs.h support. Move machine/stdarg.h logic into MI	2011-07-17 20:54:30 +00:00
xform_tcp.c	fix build in the (FAST_)IPSEC & TCP_SIGNATURE case	2012-01-11 14:39:08 +00:00
xform.h	make the use of SHA2-HMAC by FAST_IPSEC compliant to current standards:	2011-02-25 20:13:10 +00:00