Conrad Meyer ede2f7731d Correctly handle the padding for IPv6-AH, as specified by RFC4302 ...

The RFC specifies that under IPv6 the complete AH header must be 64 bit
aligned, and under IPv4, 32 bit aligned. Prior to this change, we (along
with other BSDs and MacOS) had violated this requirement.

This makes it possible to set up IPv6-AH between Linux and BSD, and also
probably between Windows and BSD.

PR:		222684
Reported and tested by:	Jason Mader <jasonmader AT gmail.com>
Obtained from:	NetBSD xform_ah.c 1.105
		(b939fe2483972eb43d71bf990cfb7f26dece7839 NetBSD/src on GH)
		by Maxime Villard
MFC after:	35.2731 hours
Relnotes:	probably (breaks ipv6 compat with older FreeBSD/NetBSD/MacOS)
Sponsored by:	Dell EMC Isilon

2018-06-04 18:51:06 +00:00

..

ah_var.h

…

ah.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

esp_var.h

…

esp.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

ipcomp_var.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

ipcomp.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

ipsec6.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

ipsec_input.c

Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hook

2017-07-31 11:04:35 +00:00

ipsec_mbuf.c

Merge r1.22-1.23 from NetBSD:

2018-04-26 12:23:31 +00:00

ipsec_mod.c

Merge projects/ipsec into head/.

2017-02-06 08:49:57 +00:00

ipsec_output.c

sys: general adoption of SPDX licensing ID tags.

2017-11-27 15:23:17 +00:00

ipsec_pcb.c

Fix SP refcount leak.

2017-04-26 00:34:05 +00:00

ipsec_support.h

Merge projects/ipsec into head/.

2017-02-06 08:49:57 +00:00

ipsec.c

Remove unused variables and sysctl declaration.

2018-02-19 12:20:51 +00:00

ipsec.h

Add a SPD cache to speed up lookups.

2018-05-22 15:54:25 +00:00

key_debug.c

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

key_debug.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

key_var.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

key.c

Temporary disable SPDCACHE statistic accounting until proper fix will be

2018-05-28 09:23:28 +00:00

key.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

keydb.h

sys: further adoption of SPDX licensing ID tags.

2017-11-20 19:43:44 +00:00

keysock.c

Rework key_sendup_mbuf() a bit:

2018-03-11 19:14:01 +00:00

keysock.h

Remove obsoleted and unused key_sendup() function.

2018-03-11 18:03:55 +00:00

subr_ipsec.c

Fix LINT build for powerpc.

2017-02-16 11:38:50 +00:00

udpencap.c

Fix possible double releasing for SA reference.

2017-09-01 11:51:07 +00:00

xform_ah.c

Correctly handle the padding for IPv6-AH, as specified by RFC4302

2018-06-04 18:51:06 +00:00

xform_esp.c

Set the proper vnet in IPsec callback functions.

2018-03-20 17:05:23 +00:00

xform_ipcomp.c

Set the proper vnet in IPsec callback functions.

2018-03-20 17:05:23 +00:00

xform_tcp.c

sys: general adoption of SPDX licensing ID tags.

2017-11-27 15:23:17 +00:00

xform.h

Set the proper vnet in IPsec callback functions.

2018-03-20 17:05:23 +00:00