Pawel Jakub Dawidek dfa9422b4a Introduce two new sysctls: ...

net.inet.ipsec.test_replay - When set to 1, IPsec will send packets with
	the same sequence number. This allows to verify if the other side
	has proper replay attacks detection.

net.inet.ipsec.test_integrity - When set 1, IPsec will send packets with
	corrupted HMAC. This allows to verify if the other side properly
	detects modified packets.

I used the first one to discover that we don't have proper replay attacks
detection in ESP (in fast_ipsec(4)).

2006-04-09 19:11:45 +00:00

..

ah_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ah.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

esp_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

esp.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipcomp_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipcomp.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipip_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipsec6.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipsec_input.c

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipsec_mbuf.c

promote fast ipsec's m_clone routine for public use; it is renamed

2006-03-15 21:11:11 +00:00

ipsec_osdep.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipsec_output.c

Retire MT_HEADER mbuf type and change its users to use MT_DATA.

2005-11-02 13:46:32 +00:00

ipsec.c

Introduce two new sysctls:

2006-04-09 19:11:45 +00:00

ipsec.h

Introduce two new sysctls:

2006-04-09 19:11:45 +00:00

key_debug.c

Fix -Wundef warnings found when compiling i386 LINT, GENERIC and

2005-12-05 11:58:35 +00:00

key_debug.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

key_var.h

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

key.c

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

key.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

keydb.h

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

keysock.c

Remove unused variables s and error in key_detach. The previous

2006-04-04 10:11:15 +00:00

keysock.h

Fix stack corruptions on amd64.

2006-01-21 10:44:34 +00:00

xform_ah.c

Introduce two new sysctls:

2006-04-09 19:11:45 +00:00

xform_esp.c

Introduce two new sysctls:

2006-04-09 19:11:45 +00:00

xform_ipcomp.c

Allow to use fast_ipsec(4) on debug.mpsafenet=0 and INVARIANTS-enabled

2006-03-23 23:26:34 +00:00

xform_ipip.c

Fix more stack corruptions on amd64.

2006-03-30 18:57:04 +00:00

xform_tcp.c

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

xform.h

Fix more stack corruptions on amd64.

2006-03-30 18:57:04 +00:00