Andrey V. Elsukov 664802113f Teach key_expire() send SADB_EXPIRE message with the SADB_EXT_LIFETIME_HARD ... extension header type. The key_flush_sad() now will send SADB_EXPIRE message when HARD lifetime expires. This is required by RFC 2367 and some keying daemons rely on these messages. HARD lifetime messages have precedence over SOFT lifetime messages, so now they will be checked first. Also now SADB_EXPIRE messages will be send even the SA has not been used, because keying daemons might want to rekey such SA. PR: 200282, 200283 Submitted by: Tobias Brunner <tobias at strongswan dot org> MFC after: 2 weeks		2015-05-19 08:30:04 +00:00
..
ah_var.h	Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,	2013-07-09 10:08:13 +00:00
ah.h
esp_var.h	Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,	2013-07-09 10:08:13 +00:00
esp.h	Summary: Remove spurious, extra, next header comments.	2015-05-15 18:04:49 +00:00
ipcomp_var.h	Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,	2013-07-09 10:08:13 +00:00
ipcomp.h
ipsec6.h	Remove now unused mtag argument from ipsec*_common_input_cb.	2014-12-11 17:14:49 +00:00
ipsec_input.c	Since PFIL can change mbuf pointer, we should update pointers after	2015-04-28 09:29:28 +00:00
ipsec_mbuf.c	Remove route chaching support from ipsec code. It isn't used for some time.	2014-12-02 04:20:50 +00:00
ipsec_output.c	Fix the comment. We will not do SPD lookup again, because	2015-04-28 11:03:47 +00:00
ipsec.c	Make ipsec_in_reject() static. We use ipsec[46]_in_reject() instead.	2015-04-27 01:12:51 +00:00
ipsec.h	Make ipsec_in_reject() static. We use ipsec[46]_in_reject() instead.	2015-04-27 01:12:51 +00:00
key_debug.c	Rename ip4_def_policy variable to def_policy. It is used by both IPv4 and	2014-12-24 18:34:56 +00:00
key_debug.h	Remove __P() macro.	2014-12-03 04:08:41 +00:00
key_var.h	Remove more constants related to static sysctl nodes. The MAXID constants	2014-02-25 18:44:33 +00:00
key.c	Teach key_expire() send SADB_EXPIRE message with the SADB_EXT_LIFETIME_HARD	2015-05-19 08:30:04 +00:00
key.h	Remove __P() macro.	2014-12-03 04:08:41 +00:00
keydb.h	Remove __P() macro.	2014-12-03 04:08:41 +00:00
keysock.c	In order to reduce use of M_EXT outside of the mbuf allocator and	2015-01-06 12:59:37 +00:00
keysock.h	Remove __P() macro.	2014-12-03 04:08:41 +00:00
xform_ah.c	Fix possible use after free due to security policy deletion.	2015-04-27 00:55:56 +00:00
xform_esp.c	Fix possible use after free due to security policy deletion.	2015-04-27 00:55:56 +00:00
xform_ipcomp.c	Fix possible use after free due to security policy deletion.	2015-04-27 00:55:56 +00:00
xform_tcp.c	Remove route chaching support from ipsec code. It isn't used for some time.	2014-12-02 04:20:50 +00:00
xform.h	Remove xform_ipip.c and code related to XF_IP4.	2015-04-18 16:38:45 +00:00