Pawel Jakub Dawidek dfa9422b4a Introduce two new sysctls:
net.inet.ipsec.test_replay - When set to 1, IPsec will send packets with
	the same sequence number. This allows to verify if the other side
	has proper replay attacks detection.

net.inet.ipsec.test_integrity - When set 1, IPsec will send packets with
	corrupted HMAC. This allows to verify if the other side properly
	detects modified packets.

I used the first one to discover that we don't have proper replay attacks
detection in ESP (in fast_ipsec(4)).
2006-04-09 19:11:45 +00:00
..
2006-04-09 15:22:25 +00:00
2006-04-03 23:56:40 +00:00
2006-04-09 19:11:45 +00:00
2006-04-07 05:16:02 +00:00
2006-01-30 16:32:08 +00:00