freebsd-dev/sys/netipsec
Pawel Jakub Dawidek dfa9422b4a Introduce two new sysctls:
net.inet.ipsec.test_replay - When set to 1, IPsec will send packets with
	the same sequence number. This allows to verify if the other side
	has proper replay attacks detection.

net.inet.ipsec.test_integrity - When set 1, IPsec will send packets with
	corrupted HMAC. This allows to verify if the other side properly
	detects modified packets.

I used the first one to discover that we don't have proper replay attacks
detection in ESP (in fast_ipsec(4)).
2006-04-09 19:11:45 +00:00
..
ah_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ah.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
esp_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
esp.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipcomp_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipcomp.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipip_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipsec6.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipsec_input.c /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipsec_mbuf.c promote fast ipsec's m_clone routine for public use; it is renamed 2006-03-15 21:11:11 +00:00
ipsec_osdep.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipsec_output.c Retire MT_HEADER mbuf type and change its users to use MT_DATA. 2005-11-02 13:46:32 +00:00
ipsec.c Introduce two new sysctls: 2006-04-09 19:11:45 +00:00
ipsec.h Introduce two new sysctls: 2006-04-09 19:11:45 +00:00
key_debug.c Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
key_debug.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
key_var.h First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
key.c First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
key.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
keydb.h First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
keysock.c Remove unused variables s and error in key_detach. The previous 2006-04-04 10:11:15 +00:00
keysock.h Fix stack corruptions on amd64. 2006-01-21 10:44:34 +00:00
xform_ah.c Introduce two new sysctls: 2006-04-09 19:11:45 +00:00
xform_esp.c Introduce two new sysctls: 2006-04-09 19:11:45 +00:00
xform_ipcomp.c Allow to use fast_ipsec(4) on debug.mpsafenet=0 and INVARIANTS-enabled 2006-03-23 23:26:34 +00:00
xform_ipip.c Fix more stack corruptions on amd64. 2006-03-30 18:57:04 +00:00
xform_tcp.c First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
xform.h Fix more stack corruptions on amd64. 2006-03-30 18:57:04 +00:00