Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
f645db7adb
NetBSD/sys/netipsec
History
maxv f645db7adb Remove support for non-IKE markers in the kernel. Discussed on tech-net@, 
and now in PR/53334. Basically non-IKE markers come from a deprecated
draft, and our kernel code for them has never worked.

Setsockopt will now reject UDP_ENCAP_ESPINUDP_NON_IKE.

Perhaps we should also add a check in key_handle_natt_info(), to make
sure we also reject UDP_ENCAP_ESPINUDP_NON_IKE in the SADB.
2018-05-31 07:03:57 +00:00
..
ah_var.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
ah.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
esp_var.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
esp.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
files.netipsec
ipcomp_var.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
ipcomp.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
ipip_var.h Rename ipip_allow->ipip_spoofcheck, and add net.inet.ipsec.ipip_spoofcheck. 2018-04-22 10:25:40 +00:00
ipsec6.h Merge ipsec4_input and ipsec6_input into ipsec_ip_input. Make the argument 2018-05-14 17:34:26 +00:00
ipsec_input.c IP6_EXTHDR_GET -> M_REGION_GET, no functional change. 2018-05-18 18:58:51 +00:00
ipsec_mbuf.c Inline M_EXT_WRITABLE directly, and remove the XXX, there's nothing wrong 2018-04-28 14:39:34 +00:00
ipsec_netbsd.c Fix the net.inet6.ipsec6.def_policy node, the variable should be 2018-04-28 13:44:19 +00:00
ipsec_output.c Remove support for non-IKE markers in the kernel. Discussed on tech-net@, 2018-05-31 07:03:57 +00:00
ipsec_private.h Remove IPSEC_SPLASSERT_SOFTNET, it has always been a no-op. 2018-04-28 15:45:16 +00:00
ipsec_var.h Remove unused macros. 2018-04-28 13:23:17 +00:00
ipsec.c Merge ipsec4_input and ipsec6_input into ipsec_ip_input. Make the argument 2018-05-14 17:34:26 +00:00
ipsec.h Merge ipsec4_input and ipsec6_input into ipsec_ip_input. Make the argument 2018-05-14 17:34:26 +00:00
ipsecif.c Remove support for non-IKE markers in the kernel. Discussed on tech-net@, 2018-05-31 07:03:57 +00:00
ipsecif.h Fix unexpected failure when ipsecif(4) over IPv6 is changed port number only. 2018-04-06 10:38:53 +00:00
key_debug.c Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
key_debug.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
key_var.h Remove unused macros. 2018-04-28 13:23:17 +00:00
key.c Remove IPSEC_SPLASSERT_SOFTNET, it has always been a no-op. 2018-04-28 15:45:16 +00:00
key.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
keydb.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
keysock.c Stop using m_copy(), use m_copym() directly. m_copy is useless, 2018-04-26 19:50:09 +00:00
keysock.h Remove extra long file paths from the headers. 2018-04-19 08:27:38 +00:00
Makefile
xform_ah.c Constify ipseczeroes, and remove one use of it. 2018-05-31 06:25:41 +00:00
xform_esp.c Add a comment and a KASSERT. I remember wondering whether this check was a 2018-05-31 06:14:18 +00:00
xform_ipcomp.c Remove unused calls to nat_t_ports_get. 2018-05-13 18:34:59 +00:00
xform_ipip.c Remove a dummy reference to XF_IP4, explain briefly why we don't use 2018-05-07 09:33:51 +00:00
xform_tcp.c Restore TCP header inclusions for TCP_SIGNATURE 2018-05-14 02:16:29 +00:00
xform.h Introduce ah_authsiz, which computes the length of the ICV only. Use it in 2018-05-30 17:17:11 +00:00