Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/sys/netipsec
History
jonathan 37b1ad2317 Commit changes to make ACQUIRE messages -- actually, all messages 
to ``registered'' sockets -- be treated ``specially'', as suggested
by RFC-2367.

The "special" treatment sys/netipsec now gives such messages is that
we use sbappendaddrchain() to deliver the (single) kernel-generated
message to each registered PF_KEY socket, with an sbprio argument of
SB_PRIO_BESTEFFORT, thus by-passing

For now, we check for registered messages, set a local `sbprio'
argument, and call sbappendaddrchain() (as opposed to sbappendaddr())
if and only if sbprio is non-NULL. As noted, we can rework
key_sendup_mbuf(), and all its callers, to pass the sbprio argument;
pending consensus (and hopeful KAME buy-back).
 		2004-06-10 01:39:59 +00:00
..
Makefile Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ah.h
…
ah_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
esp.h
…
esp_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
files.netipsec xform_tcp.c is needed only with FAST_IPSEC 2004-04-26 03:50:57 +00:00
ipcomp.h
…
ipcomp_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipip_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec6.h Dynamic sysctl. 2003-12-04 19:38:21 +00:00
ipsec_input.c Add `const' to the safety-catch local definition of ip6_protosw, 2004-04-24 23:28:13 +00:00
ipsec_mbuf.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec_netbsd.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec_osdep.h Minimal cleanup of sys/netipsec/ipsec{,_osdep}.h, to allow compiling 2004-04-30 04:12:29 +00:00
ipsec_output.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
key.c Fix oversight from re-using reworked sysctl() code for unicast SPD,SADB dump: 2004-06-10 01:28:25 +00:00
key.h Bring the PCB policy cache over from KAME IPsec, including the "hint" 2004-03-02 02:22:56 +00:00
key_debug.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
key_debug.h
…
key_var.h Add KEYCTL_DUMPSA/KEYCTL_DUMPSP support. 2003-12-12 21:04:03 +00:00
keydb.h
…
keysock.c Commit changes to make ACQUIRE messages -- actually, all messages 2004-06-10 01:39:59 +00:00
keysock.h Dynamic sysctl. 2003-12-04 19:38:21 +00:00
xform.h
…
xform_ah.c Commit an old diff for AH which has been in my personal tree since 2004-05-01 03:00:42 +00:00
xform_esp.c sys/netinet6/ip6_ecn.h is reportedly a FreeBSD-ism; NetBSD has 2004-03-17 00:21:43 +00:00
xform_ipcomp.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
xform_ipip.c sys/netinet6/ip6_ecn.h is reportedly a FreeBSD-ism; NetBSD has 2004-03-17 00:21:43 +00:00
xform_tcp.c Initial commit of a port of the FreeBSD implementation of RFC 2385 2004-04-25 22:25:03 +00:00