Andrey V. Elsukov 6f814d0ec1 Fix handling of net.inet.ipsec.dfbit=2 variable. ...

IP_DF macro is in host bytes order, but ip_off field is in network bytes
order. So, use htons() for correct check.

2016-03-18 09:03:00 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

…

ipcomp_var.h

…

ipcomp.h

…

ipsec6.h

…

ipsec_input.c

Overhaul if_enc(4) and make it loadable in run-time.

2015-11-25 07:31:59 +00:00

ipsec_mbuf.c

These files were getting sys/malloc.h and vm/uma.h with header pollution

2016-02-01 17:41:21 +00:00

ipsec_output.c

Fix handling of net.inet.ipsec.dfbit=2 variable.

2016-03-18 09:03:00 +00:00

ipsec.c

Overhaul if_enc(4) and make it loadable in run-time.

2015-11-25 07:31:59 +00:00

ipsec.h

Overhaul if_enc(4) and make it loadable in run-time.

2015-11-25 07:31:59 +00:00

key_debug.c

These files were getting sys/malloc.h and vm/uma.h with header pollution

2016-02-01 17:41:21 +00:00

key_debug.h

…

key_var.h

…

key.c

Put IPSec's anouncement of its successful intialisation under bootverbose:

2016-03-13 19:27:46 +00:00

key.h

…

keydb.h

Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsec

2015-08-04 17:47:11 +00:00

keysock.c

…

keysock.h

…

xform_ah.c

Take extra reference to security policy before calling crypto_dispatch().

2015-09-30 08:16:33 +00:00

xform_esp.c

Use explicitly specified ivsize instead of blocksize when we mean IV size.

2015-11-16 07:10:42 +00:00

xform_ipcomp.c

Take extra reference to security policy before calling crypto_dispatch().

2015-09-30 08:16:33 +00:00

xform_tcp.c

…

xform.h

RFC4868 section 2.3 requires that the output be half... This fixes

2015-07-29 07:15:16 +00:00