Changes in files.netipsec

Changes in files.netipsec http://nxr.netbsd.org/rss/src/sys/netipsec/files.netipsec en Copyright 2005 Java Rename enc_xform_rijndael128 -> enc_xform_aes. Update netipsec dependency. /src/sys/netipsec/files.netipsec - 1.15 Tue Jun 30 04:14:55 UTC 2020 riastradh Make crypto/rijindael optional again as cprng_strong does no longer depend on it. Dependency is explicitly declared in files.foo if a component requires it. /src/sys/netipsec/files.netipsec - 1.14 Wed Apr 22 09:15:40 UTC 2020 rin branches: 1.13.14; add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by christos@n.o, joerg@n.o and ozaki-r@n.o, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html /src/sys/netipsec/files.netipsec - 1.13 Wed Jan 10 10:56:30 UTC 2018 knakahara branches: 1.12.26; IPSEC has not come in two speeds for a long time now (IPSEC == kame, FAST_IPSEC). Make everything refer to IPSEC to avoid confusion. /src/sys/netipsec/files.netipsec - 1.12 Wed Jun 05 19:01:26 UTC 2013 christos PR/47886: Dr. Wolfgang Stukenbrock: IPSEC_NAT_T enabled kernels may access outdated pointers and pass ESP data to UPD-sockets. While here, simplify the code and remove the IPSEC_NAT_T option; always compile nat-traversal in so that it does not bitrot. /src/sys/netipsec/files.netipsec - 1.11 Tue Jun 04 22:47:37 UTC 2013 christos branches: 1.10.2; remove KAME IPSEC, replaced by FAST_IPSEC /src/sys/netipsec/files.netipsec - 1.10 Thu Mar 22 20:34:42 UTC 2012 drochner Make FAST_IPSEC the default IPSEC implementation which is built into the kernel if the "IPSEC" kernel option is given. The old implementation is still available as KAME_IPSEC. Do some minimal manpage adjustment -- kame_ipsec(4) is a copy of the old ipsec(4) and the latter is now a copy of fast_ipsec(4). /src/sys/netipsec/files.netipsec - 1.9 Mon Jan 09 15:16:31 UTC 2012 drochner rename the IPSEC in-kernel CPP variable and config(8) option to KAME_IPSEC, and make IPSEC define it so that existing kernel config files work as before Now the default can be easily be changed to FAST_IPSEC just by setting the IPSEC alias to FAST_IPSEC. /src/sys/netipsec/files.netipsec - 1.8 Mon Dec 19 11:59:58 UTC 2011 drochner branches: 1.7.52; 1.7.56; defflag IPSEC_DEBUG /src/sys/netipsec/files.netipsec - 1.7 Fri Nov 16 21:15:20 UTC 2007 christos branches: 1.6.44; 1.6.46; 1.6.50; 1.6.52; merge ktrace-lwp. /src/sys/netipsec/files.netipsec - 1.6 Sun Dec 11 00:25:05 UTC 2005 christos branches: 1.5.2; 1.5.14; xform_tcp.c is needed only with FAST_IPSEC /src/sys/netipsec/files.netipsec - 1.5 Mon Apr 26 03:50:57 UTC 2004 itojun Initial commit of a port of the FreeBSD implementation of RFC 2385 (MD5 signatures for TCP, as used with BGP). Credit for original FreeBSD code goes to Bruce M. Simpson, with FreeBSD sponsorship credited to sentex.net. Shortening of the setsockopt() name attributed to Vincent Jardin. This commit is a minimal, working version of the FreeBSD code, as MFC'ed to FreeBSD-4. It has received minimal testing with a ttcp modified to set the TCP-MD5 option; BMS's additions to tcpdump-current (tcpdump -M) confirm that the MD5 signatures are correct. Committed as-is for further testing between a NetBSD BGP speaker (e.g., quagga) and industry-standard BGP speakers (e.g., Cisco, Juniper). NOTE: This version has two potential flaws. First, I do see any code that verifies recieved TCP-MD5 signatures. Second, the TCP-MD5 options are internally padded and assumed to be 32-bit aligned. A more space-efficient scheme is to pack all TCP options densely (and possibly unaligned) into the TCP header ; then do one final padding to a 4-byte boundary. Pre-existing comments note that accounting for TCP-option space when we add SACK is yet to be done. For now, I'm punting on that; we can solve it properly, in a way that will handle SACK blocks, as a separate exercise. In case a pullup to NetBSD-2 is requested, this adds sys/netipsec/xform_tcp.c ,and modifies: sys/net/pfkeyv2.h,v 1.15 sys/netinet/files.netinet,v 1.5 sys/netinet/ip.h,v 1.25 sys/netinet/tcp.h,v 1.15 sys/netinet/tcp_input.c,v 1.200 sys/netinet/tcp_output.c,v 1.109 sys/netinet/tcp_subr.c,v 1.165 sys/netinet/tcp_usrreq.c,v 1.89 sys/netinet/tcp_var.h,v 1.109 sys/netipsec/files.netipsec,v 1.3 sys/netipsec/ipsec.c,v 1.11 sys/netipsec/ipsec.h,v 1.7 sys/netipsec/key.c,v 1.11 share/man/man4/tcp.4,v 1.16 lib/libipsec/pfkey.c,v 1.20 lib/libipsec/pfkey_dump.c,v 1.17 lib/libipsec/policy_token.l,v 1.8 sbin/setkey/parse.y,v 1.14 sbin/setkey/setkey.8,v 1.27 sbin/setkey/token.l,v 1.15 Note that the preceding two revisions to tcp.4 will be required to cleanly apply this diff. /src/sys/netipsec/files.netipsec - 1.4 Sun Apr 25 22:25:03 UTC 2004 jonathan Split opencrypto configuration into an attribute, usable by inkernel clients, and a pseudo-device for userspace access. The attribute is named `opencrypto'. The pseudo-device is renamed to "crypto", which has a dependency on "opencrypto". The sys/conf/majors entry and pseudo-device attach entrypoint are updated to match the new pseudo-device name. Fast IPsec (sys/netipsec/files.ipsec) now lists a dependency on the "opencrypto" attribute. Drivers for crypto accelerators (ubsec, hifn775x) also pull in opencrypto, as providers of opencrypto transforms. /src/sys/netipsec/files.netipsec - 1.3 Wed Dec 31 16:44:26 UTC 2003 jonathan separate netkey/key* and netipsec/key* /src/sys/netipsec/files.netipsec - 1.2 Sat Sep 20 05:14:42 UTC 2003 itojun merge netipsec/key* into netkey/key*. no need for both. change confusing filename /src/sys/netipsec/files.netipsec - 1.1 Fri Sep 12 11:20:58 UTC 2003 itojun sync with head /src/sys/netipsec/files.netipsec - 1.5.14.1 Fri Dec 07 17:34:39 UTC 2007 yamt Fix the sync with head I botched. /src/sys/netipsec/files.netipsec - 1.5.2.4 Tue Sep 21 13:37:48 UTC 2004 skrll Sync with HEAD. /src/sys/netipsec/files.netipsec - 1.5.2.3 Sat Sep 18 14:55:32 UTC 2004 skrll Sync with HEAD /src/sys/netipsec/files.netipsec - 1.5.2.2 Tue Aug 03 10:55:29 UTC 2004 skrll file files.netipsec was added on branch ktrace-lwp on 2004-08-03 10:55:29 +0000 /src/sys/netipsec/files.netipsec - 1.5.2.1 Mon Apr 26 03:50:57 UTC 2004 skrll