Marcin Wojtas ac152c14e0 Trigger soft lifetime expiration on sequence number ...

This patch adds 80% of UINT32_MAX limit on sequence number.
When sequence number reaches limit kernel sends SADB_EXPIRE message to
IKE daemon which is responsible to perform rekeying.

Submitted by:           Patryk Duda <pdk@semihalf.com>
Reviewed by:            ae
Differential revision:  https://reviews.freebsd.org/D22370
Obtained from:          Semihalf
Sponsored by:           Stormshield

2020-10-16 11:27:01 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

net: clean up empty lines in .c and .h files

2020-09-01 21:19:14 +00:00

ipcomp_var.h

…

ipcomp.h

…

ipsec6.h

…

ipsec_input.c

net: clean up empty lines in .c and .h files

2020-09-01 21:19:14 +00:00

ipsec_mbuf.c

Consistently include opt_ipsec.h for consumers of <netipsec/ipsec.h>.

2020-05-29 19:22:40 +00:00

ipsec_mod.c

…

ipsec_output.c

net: clean up empty lines in .c and .h files

2020-09-01 21:19:14 +00:00

ipsec_pcb.c

net: clean up empty lines in .c and .h files

2020-09-01 21:19:14 +00:00

ipsec_support.h

…

ipsec.c

Implement anti-replay algorithm with ESN support

2020-10-16 11:24:12 +00:00

ipsec.h

Implement anti-replay algorithm with ESN support

2020-10-16 11:24:12 +00:00

key_debug.c

Implement anti-replay algorithm with ESN support

2020-10-16 11:24:12 +00:00

key_debug.h

…

key_var.h

…

key.c

Trigger soft lifetime expiration on sequence number

2020-10-16 11:27:01 +00:00

key.h

…

keydb.h

Add support for IPsec ESN and pass relevant information to crypto layer

2020-10-16 11:25:45 +00:00

keysock.c

Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)

2020-02-26 14:26:36 +00:00

keysock.h

…

subr_ipsec.c

…

udpencap.c

net: clean up empty lines in .c and .h files

2020-09-01 21:19:14 +00:00

xform_ah.c

Add support for IPsec ESN and pass relevant information to crypto layer

2020-10-16 11:25:45 +00:00

xform_esp.c

Add support for IPsec ESN and pass relevant information to crypto layer

2020-10-16 11:25:45 +00:00

xform_ipcomp.c

Simplify IPsec transform-specific teardown.

2020-06-25 23:59:16 +00:00

xform_tcp.c

Simplify IPsec transform-specific teardown.

2020-06-25 23:59:16 +00:00

xform.h

Simplify IPsec transform-specific teardown.

2020-06-25 23:59:16 +00:00