Andrey V. Elsukov 3f44ee8e99 Add support for dummy ESP packets with next header field equal to ...

IPPROTO_NONE.

According to RFC4303 2.6 they should be silently dropped.

Submitted by:	aurelien.cazuc.external_stormshield.eu
MFC after:	10 days
Sponsored by:	Stormshield
Differential Revision:	https://reviews.freebsd.org/D22557

2019-11-27 10:24:46 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

…

ipcomp_var.h

…

ipcomp.h

…

ipsec6.h

…

ipsec_input.c

…

ipsec_mbuf.c

Merge r1.22-1.23 from NetBSD:

2018-04-26 12:23:31 +00:00

ipsec_mod.c

…

ipsec_output.c

…

ipsec_pcb.c

Remove unused argument to priv_check_cred.

2018-12-11 19:32:16 +00:00

ipsec_support.h

…

ipsec.c

Fix broken window replay check that will allow old packet to be accepted.

2019-09-06 14:30:23 +00:00

ipsec.h

Make the warning intervals for deprecated crypto algorithms tunable.

2019-06-11 23:00:55 +00:00

key_debug.c

r335795 build fix: make static functions static

2018-06-29 14:51:36 +00:00

key_debug.h

…

key_var.h

…

key.c

Add missing new line in several log messages.

2019-08-09 08:58:09 +00:00

key.h

Replace read_random(9) with more appropriate arc4rand(9) KPIs

2019-04-04 01:02:50 +00:00

keydb.h

OCF: Add a typedef for session identifiers

2018-07-13 23:46:07 +00:00

keysock.c

Use the new VNET_DEFINE_STATIC macro when we are defining static VNET

2018-07-24 16:35:52 +00:00

keysock.h

…

subr_ipsec.c

Fix witness warning in xform_init().

2018-09-26 14:47:51 +00:00

udpencap.c

…

xform_ah.c

netinet*: replace IP6_EXTHDR_GET()

2019-11-15 21:44:17 +00:00

xform_esp.c

Add support for dummy ESP packets with next header field equal to

2019-11-27 10:24:46 +00:00

xform_ipcomp.c

Widen NET_EPOCH coverage.

2019-10-07 22:40:05 +00:00

xform_tcp.c

fix locking within tcp_ipsec_pcbctl() to match ipsec4_pcbctl(), ipsec4_pcbctl()

2018-07-04 17:10:07 +00:00

xform.h

Fix witness warning in xform_init().

2018-09-26 14:47:51 +00:00