head 1.15; access; symbols netbsd-10-0-RELEASE:1.15 netbsd-10-0-RC6:1.15 netbsd-10-0-RC5:1.15 netbsd-10-0-RC4:1.15 netbsd-10-0-RC3:1.15 netbsd-10-0-RC2:1.15 thorpej-ifq:1.15.0.24 thorpej-ifq-base:1.15 thorpej-altq-separation:1.15.0.22 thorpej-altq-separation-base:1.15 netbsd-10-0-RC1:1.15 netbsd-10:1.15.0.20 netbsd-10-base:1.15 bouyer-sunxi-drm:1.15.0.18 bouyer-sunxi-drm-base:1.15 netbsd-9-3-RELEASE:1.13 thorpej-i2c-spi-conf2:1.15.0.16 thorpej-i2c-spi-conf2-base:1.15 thorpej-futex2:1.15.0.14 thorpej-futex2-base:1.15 thorpej-cfargs2:1.15.0.12 thorpej-cfargs2-base:1.15 cjep_sun2x-base1:1.15 cjep_sun2x:1.15.0.10 cjep_sun2x-base:1.15 cjep_staticlib_x-base1:1.15 netbsd-9-2-RELEASE:1.13 cjep_staticlib_x:1.15.0.8 cjep_staticlib_x-base:1.15 thorpej-i2c-spi-conf:1.15.0.6 thorpej-i2c-spi-conf-base:1.15 thorpej-cfargs:1.15.0.4 thorpej-cfargs-base:1.15 thorpej-futex:1.15.0.2 thorpej-futex-base:1.15 netbsd-9-1-RELEASE:1.13 bouyer-xenpvh-base2:1.14 phil-wifi-20200421:1.13 bouyer-xenpvh-base1:1.13 phil-wifi-20200411:1.13 bouyer-xenpvh:1.13.0.14 bouyer-xenpvh-base:1.13 is-mlppp:1.13.0.12 is-mlppp-base:1.13 phil-wifi-20200406:1.13 netbsd-8-2-RELEASE:1.12.26.1 ad-namecache-base3:1.13 netbsd-9-0-RELEASE:1.13 netbsd-9-0-RC2:1.13 ad-namecache-base2:1.13 ad-namecache-base1:1.13 ad-namecache:1.13.0.10 ad-namecache-base:1.13 netbsd-9-0-RC1:1.13 phil-wifi-20191119:1.13 netbsd-9:1.13.0.8 netbsd-9-base:1.13 phil-wifi-20190609:1.13 netbsd-8-1-RELEASE:1.12.26.1 netbsd-8-1-RC1:1.12.26.1 isaki-audio2:1.13.0.6 isaki-audio2-base:1.13 pgoyette-compat-merge-20190127:1.13 pgoyette-compat-20190127:1.13 pgoyette-compat-20190118:1.13 pgoyette-compat-1226:1.13 pgoyette-compat-1126:1.13 pgoyette-compat-1020:1.13 pgoyette-compat-0930:1.13 pgoyette-compat-0906:1.13 netbsd-7-2-RELEASE:1.12 pgoyette-compat-0728:1.13 netbsd-8-0-RELEASE:1.12.26.1 phil-wifi:1.13.0.4 phil-wifi-base:1.13 pgoyette-compat-0625:1.13 netbsd-8-0-RC2:1.12.26.1 pgoyette-compat-0521:1.13 pgoyette-compat-0502:1.13 pgoyette-compat-0422:1.13 netbsd-8-0-RC1:1.12.26.1 pgoyette-compat-0415:1.13 pgoyette-compat-0407:1.13 pgoyette-compat-0330:1.13 pgoyette-compat-0322:1.13 pgoyette-compat-0315:1.13 netbsd-7-1-2-RELEASE:1.12 pgoyette-compat:1.13.0.2 pgoyette-compat-base:1.13 netbsd-7-1-1-RELEASE:1.12 tls-maxphys-base-20171202:1.12 matt-nb8-mediatek:1.12.0.30 matt-nb8-mediatek-base:1.12 nick-nhusb-base-20170825:1.12 perseant-stdc-iso10646:1.12.0.28 perseant-stdc-iso10646-base:1.12 netbsd-8:1.12.0.26 netbsd-8-base:1.12 prg-localcount2-base3:1.12 prg-localcount2-base2:1.12 prg-localcount2-base1:1.12 prg-localcount2:1.12.0.24 prg-localcount2-base:1.12 pgoyette-localcount-20170426:1.12 bouyer-socketcan-base1:1.12 jdolecek-ncq:1.12.0.22 jdolecek-ncq-base:1.12 pgoyette-localcount-20170320:1.12 netbsd-7-1:1.12.0.20 netbsd-7-1-RELEASE:1.12 netbsd-7-1-RC2:1.12 nick-nhusb-base-20170204:1.12 netbsd-7-nhusb-base-20170116:1.12 bouyer-socketcan:1.12.0.18 bouyer-socketcan-base:1.12 pgoyette-localcount-20170107:1.12 netbsd-7-1-RC1:1.12 nick-nhusb-base-20161204:1.12 pgoyette-localcount-20161104:1.12 netbsd-7-0-2-RELEASE:1.12 nick-nhusb-base-20161004:1.12 localcount-20160914:1.12 netbsd-7-nhusb:1.12.0.16 netbsd-7-nhusb-base:1.12 pgoyette-localcount-20160806:1.12 pgoyette-localcount-20160726:1.12 pgoyette-localcount:1.12.0.14 pgoyette-localcount-base:1.12 nick-nhusb-base-20160907:1.12 nick-nhusb-base-20160529:1.12 netbsd-7-0-1-RELEASE:1.12 nick-nhusb-base-20160422:1.12 nick-nhusb-base-20160319:1.12 nick-nhusb-base-20151226:1.12 netbsd-7-0:1.12.0.12 netbsd-7-0-RELEASE:1.12 nick-nhusb-base-20150921:1.12 netbsd-7-0-RC3:1.12 netbsd-7-0-RC2:1.12 netbsd-7-0-RC1:1.12 nick-nhusb-base-20150606:1.12 nick-nhusb-base-20150406:1.12 nick-nhusb:1.12.0.10 nick-nhusb-base:1.12 netbsd-5-2-3-RELEASE:1.7 netbsd-5-1-5-RELEASE:1.7 netbsd-6-0-6-RELEASE:1.9 netbsd-6-1-5-RELEASE:1.9 netbsd-7:1.12.0.8 netbsd-7-base:1.12 yamt-pagecache-base9:1.12 yamt-pagecache-tag8:1.7.52.1 netbsd-6-1-4-RELEASE:1.9 netbsd-6-0-5-RELEASE:1.9 tls-earlyentropy:1.12.0.6 tls-earlyentropy-base:1.12 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.12 riastradh-drm2-base3:1.12 netbsd-6-1-3-RELEASE:1.9 netbsd-6-0-4-RELEASE:1.9 netbsd-5-2-2-RELEASE:1.7 netbsd-5-1-4-RELEASE:1.7 netbsd-6-1-2-RELEASE:1.9 netbsd-6-0-3-RELEASE:1.9 netbsd-5-2-1-RELEASE:1.7 netbsd-5-1-3-RELEASE:1.7 rmind-smpnet-nbase:1.12 netbsd-6-1-1-RELEASE:1.9 riastradh-drm2-base2:1.12 riastradh-drm2-base1:1.12 riastradh-drm2:1.12.0.4 riastradh-drm2-base:1.12 rmind-smpnet:1.12.0.2 rmind-smpnet-base:1.12 netbsd-6-1:1.9.0.8 netbsd-6-0-2-RELEASE:1.9 netbsd-6-1-RELEASE:1.9 khorben-n900:1.10.0.8 netbsd-6-1-RC4:1.9 netbsd-6-1-RC3:1.9 agc-symver:1.10.0.6 agc-symver-base:1.10 netbsd-6-1-RC2:1.9 netbsd-6-1-RC1:1.9 yamt-pagecache-base8:1.10 netbsd-5-2:1.7.0.58 netbsd-6-0-1-RELEASE:1.9 yamt-pagecache-base7:1.10 netbsd-5-2-RELEASE:1.7 netbsd-5-2-RC1:1.7 matt-nb6-plus-nbase:1.9 yamt-pagecache-base6:1.10 netbsd-6-0:1.9.0.6 netbsd-6-0-RELEASE:1.9 netbsd-6-0-RC2:1.9 tls-maxphys:1.10.0.2 tls-maxphys-base:1.12 matt-nb6-plus:1.9.0.4 matt-nb6-plus-base:1.9 netbsd-6-0-RC1:1.9 jmcneill-usbmp-base10:1.10 yamt-pagecache-base5:1.10 jmcneill-usbmp-base9:1.10 yamt-pagecache-base4:1.10 jmcneill-usbmp-base8:1.10 jmcneill-usbmp-base7:1.9 jmcneill-usbmp-base6:1.9 jmcneill-usbmp-base5:1.9 jmcneill-usbmp-base4:1.9 jmcneill-usbmp-base3:1.9 jmcneill-usbmp-pre-base2:1.7 jmcneill-usbmp-base2:1.9 netbsd-6:1.9.0.2 netbsd-6-base:1.9 netbsd-5-1-2-RELEASE:1.7 netbsd-5-1-1-RELEASE:1.7 jmcneill-usbmp:1.7.0.56 jmcneill-usbmp-base:1.7 jmcneill-audiomp3:1.7.0.54 jmcneill-audiomp3-base:1.7 yamt-pagecache-base3:1.7 yamt-pagecache-base2:1.7 yamt-pagecache:1.7.0.52 yamt-pagecache-base:1.7 rmind-uvmplock-nbase:1.7 cherry-xenmp:1.7.0.50 cherry-xenmp-base:1.7 bouyer-quota2-nbase:1.7 bouyer-quota2:1.7.0.48 bouyer-quota2-base:1.7 jruoho-x86intr:1.7.0.46 jruoho-x86intr-base:1.7 matt-mips64-premerge-20101231:1.7 matt-nb5-mips64-premerge-20101231:1.7 matt-nb5-pq3:1.7.0.44 matt-nb5-pq3-base:1.7 netbsd-5-1:1.7.0.42 netbsd-5-1-RELEASE:1.7 uebayasi-xip-base4:1.7 uebayasi-xip-base3:1.7 yamt-nfs-mp-base11:1.7 netbsd-5-1-RC4:1.7 matt-nb5-mips64-k15:1.7 uebayasi-xip-base2:1.7 yamt-nfs-mp-base10:1.7 netbsd-5-1-RC3:1.7 netbsd-5-1-RC2:1.7 uebayasi-xip-base1:1.7 netbsd-5-1-RC1:1.7 rmind-uvmplock:1.7.0.40 rmind-uvmplock-base:1.7 yamt-nfs-mp-base9:1.7 uebayasi-xip:1.7.0.38 uebayasi-xip-base:1.7 netbsd-5-0-2-RELEASE:1.7 matt-nb5-mips64-premerge-20091211:1.7 matt-premerge-20091211:1.7 yamt-nfs-mp-base8:1.7 matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.7 matt-nb4-mips64-k7-u2a-k9b:1.7 matt-nb5-mips64-u1-k1-k5:1.7 yamt-nfs-mp-base7:1.7 matt-nb5-mips64:1.7.0.36 netbsd-5-0-1-RELEASE:1.7 jymxensuspend-base:1.7 yamt-nfs-mp-base6:1.7 yamt-nfs-mp-base5:1.7 yamt-nfs-mp-base4:1.7 jym-xensuspend-nbase:1.7 yamt-nfs-mp-base3:1.7 nick-hppapmap-base4:1.7 nick-hppapmap-base3:1.7 netbsd-5-0:1.7.0.34 netbsd-5-0-RELEASE:1.7 netbsd-5-0-RC4:1.7 netbsd-5-0-RC3:1.7 nick-hppapmap-base2:1.7 netbsd-5-0-RC2:1.7 jym-xensuspend:1.7.0.32 jym-xensuspend-base:1.7 netbsd-5-0-RC1:1.7 haad-dm-base2:1.7 haad-nbase2:1.7 ad-audiomp2:1.7.0.30 ad-audiomp2-base:1.7 netbsd-5:1.7.0.28 netbsd-5-base:1.7 nick-hppapmap:1.7.0.26 nick-hppapmap-base:1.7 matt-mips64-base2:1.7 matt-mips64:1.6.0.58 haad-dm-base1:1.7 wrstuden-revivesa-base-4:1.7 netbsd-4-0-1-RELEASE:1.6 wrstuden-revivesa-base-3:1.7 wrstuden-revivesa-base-2:1.7 wrstuden-fixsa-newbase:1.6 nick-csl-alignment-base5:1.6 haad-dm:1.7.0.24 haad-dm-base:1.7 wrstuden-revivesa-base-1:1.7 simonb-wapbl-nbase:1.7 yamt-pf42-base4:1.7 simonb-wapbl:1.7.0.22 simonb-wapbl-base:1.7 yamt-pf42-base3:1.7 hpcarm-cleanup-nbase:1.7 yamt-pf42-baseX:1.7 yamt-pf42-base2:1.7 yamt-nfs-mp-base2:1.7 wrstuden-revivesa:1.7.0.20 wrstuden-revivesa-base:1.7 yamt-nfs-mp:1.7.0.18 yamt-nfs-mp-base:1.7 yamt-pf42:1.7.0.16 yamt-pf42-base:1.7 ad-socklock-base1:1.7 yamt-lazymbuf-base15:1.7 yamt-lazymbuf-base14:1.7 keiichi-mipv6-nbase:1.7 mjf-devfs2:1.7.0.14 mjf-devfs2-base:1.7 nick-net80211-sync:1.7.0.12 nick-net80211-sync-base:1.7 keiichi-mipv6:1.7.0.10 keiichi-mipv6-base:1.7 bouyer-xeni386-merge1:1.7 matt-armv6-prevmlocking:1.6 wrstuden-fixsa-base-1:1.6 vmlocking2-base3:1.7 netbsd-4-0:1.6.0.56 netbsd-4-0-RELEASE:1.6 bouyer-xeni386-nbase:1.7 yamt-kmem-base3:1.7 cube-autoconf:1.7.0.8 cube-autoconf-base:1.7 yamt-kmem-base2:1.7 bouyer-xeni386:1.7.0.6 bouyer-xeni386-base:1.7 yamt-kmem:1.7.0.4 yamt-kmem-base:1.7 vmlocking2-base2:1.7 reinoud-bufcleanup-nbase:1.7 vmlocking2:1.7.0.2 vmlocking2-base1:1.7 netbsd-4-0-RC5:1.6 matt-nb4-arm:1.6.0.54 matt-nb4-arm-base:1.6 matt-armv6-nbase:1.7 jmcneill-base:1.6 netbsd-4-0-RC4:1.6 mjf-devfs:1.6.0.52 mjf-devfs-base:1.7 bouyer-xenamd64-base2:1.7 vmlocking-nbase:1.7 yamt-x86pmap-base4:1.6 bouyer-xenamd64:1.6.0.50 bouyer-xenamd64-base:1.7 netbsd-4-0-RC3:1.6 yamt-x86pmap-base3:1.6 yamt-x86pmap-base2:1.6 netbsd-4-0-RC2:1.6 yamt-x86pmap:1.6.0.48 yamt-x86pmap-base:1.6 netbsd-4-0-RC1:1.6 matt-armv6:1.6.0.46 matt-armv6-base:1.7 matt-mips64-base:1.6 jmcneill-pm:1.6.0.44 jmcneill-pm-base:1.7 hpcarm-cleanup:1.6.0.42 hpcarm-cleanup-base:1.7 nick-csl-alignment:1.6.0.40 nick-csl-alignment-base:1.6 netbsd-3-1-1-RELEASE:1.5 netbsd-3-0-3-RELEASE:1.5 yamt-idlelwp-base8:1.6 wrstuden-fixsa:1.6.0.38 wrstuden-fixsa-base:1.6 thorpej-atomic:1.6.0.36 thorpej-atomic-base:1.6 reinoud-bufcleanup:1.6.0.34 reinoud-bufcleanup-base:1.7 mjf-ufs-trans:1.6.0.32 mjf-ufs-trans-base:1.6 vmlocking:1.6.0.30 vmlocking-base:1.6 ad-audiomp:1.6.0.28 ad-audiomp-base:1.6 yamt-idlelwp:1.6.0.26 post-newlock2-merge:1.6 newlock2-nbase:1.6 yamt-splraiseipl-base5:1.6 yamt-splraiseipl-base4:1.6 yamt-splraiseipl-base3:1.6 abandoned-netbsd-4-base:1.6 abandoned-netbsd-4:1.6.0.18 netbsd-3-1:1.5.0.24 netbsd-3-1-RELEASE:1.5 netbsd-3-0-2-RELEASE:1.5 yamt-splraiseipl-base2:1.6 netbsd-3-1-RC4:1.5 yamt-splraiseipl:1.6.0.22 yamt-splraiseipl-base:1.6 netbsd-3-1-RC3:1.5 yamt-pdpolicy-base9:1.6 newlock2:1.6.0.20 newlock2-base:1.6 yamt-pdpolicy-base8:1.6 netbsd-3-1-RC2:1.5 netbsd-3-1-RC1:1.5 yamt-pdpolicy-base7:1.6 netbsd-4:1.6.0.24 netbsd-4-base:1.6 yamt-pdpolicy-base6:1.6 chap-midi-nbase:1.6 netbsd-3-0-1-RELEASE:1.5 gdamore-uart:1.6.0.16 gdamore-uart-base:1.6 simonb-timcounters-final:1.6 yamt-pdpolicy-base5:1.6 chap-midi:1.6.0.14 chap-midi-base:1.6 yamt-pdpolicy-base4:1.6 yamt-pdpolicy-base3:1.6 peter-altq-base:1.6 peter-altq:1.6.0.12 yamt-pdpolicy-base2:1.6 elad-kernelauth-base:1.6 elad-kernelauth:1.6.0.10 yamt-pdpolicy:1.6.0.8 yamt-pdpolicy-base:1.6 yamt-uio_vmspace-base5:1.6 simonb-timecounters:1.6.0.6 simonb-timecounters-base:1.6 rpaulo-netinet-merge-pcb:1.6.0.4 rpaulo-netinet-merge-pcb-base:1.6 yamt-uio_vmspace:1.6.0.2 netbsd-3-0:1.5.0.22 netbsd-3-0-RELEASE:1.5 netbsd-3-0-RC6:1.5 yamt-readahead-base3:1.5 netbsd-3-0-RC5:1.5 netbsd-3-0-RC4:1.5 netbsd-3-0-RC3:1.5 yamt-readahead-base2:1.5 netbsd-3-0-RC2:1.5 yamt-readahead-pervnode:1.5 yamt-readahead-perfile:1.5 yamt-readahead:1.5.0.20 yamt-readahead-base:1.5 netbsd-3-0-RC1:1.5 yamt-vop-base3:1.5 netbsd-2-0-3-RELEASE:1.3 netbsd-2-1:1.3.0.6 yamt-vop-base2:1.5 thorpej-vnode-attr:1.5.0.18 thorpej-vnode-attr-base:1.5 netbsd-2-1-RELEASE:1.3 yamt-vop:1.5.0.16 yamt-vop-base:1.5 netbsd-2-1-RC6:1.3 netbsd-2-1-RC5:1.3 netbsd-2-1-RC4:1.3 netbsd-2-1-RC3:1.3 netbsd-2-1-RC2:1.3 netbsd-2-1-RC1:1.3 yamt-lazymbuf:1.5.0.14 yamt-km-base4:1.5 netbsd-2-0-2-RELEASE:1.3 yamt-km-base3:1.5 netbsd-3:1.5.0.12 netbsd-3-base:1.5 yamt-km-base2:1.5 yamt-km:1.5.0.8 yamt-km-base:1.5 kent-audio2:1.5.0.6 kent-audio2-base:1.5 netbsd-2-0-1-RELEASE:1.3 kent-audio1-beforemerge:1.5 netbsd-2:1.3.0.4 netbsd-2-base:1.3 kent-audio1:1.5.0.4 kent-audio1-base:1.5 netbsd-2-0-RELEASE:1.3 netbsd-2-0-RC5:1.3 netbsd-2-0-RC4:1.3 netbsd-2-0-RC3:1.3 netbsd-2-0-RC2:1.3 netbsd-2-0-RC1:1.3 ktrace-lwp-base:1.5 ktrace-lwp:1.5.0.2 netbsd-2-0:1.3.0.2 netbsd-2-0-base:1.3; locks; strict; comment @# @; 1.15 date 2020.06.30.04.14.55; author riastradh; state Exp; branches; next 1.14; commitid ENhEK0ocgyYlAceC; 1.14 date 2020.04.22.09.15.40; author rin; state Exp; branches; next 1.13; commitid fnbj7cWSLWXdqm5C; 1.13 date 2018.01.10.10.56.30; author knakahara; state Exp; branches 1.13.14.1; next 1.12; commitid yPVdtArNvCmzNjmA; 1.12 date 2013.06.05.19.01.26; author christos; state Exp; branches 1.12.26.1; next 1.11; commitid dVYMu6whoO3QtsSw; 1.11 date 2013.06.04.22.47.37; author christos; state Exp; branches; next 1.10; commitid ggyhenOdIP5sLlSw; 1.10 date 2012.03.22.20.34.42; author drochner; state Exp; branches 1.10.2.1; next 1.9; 1.9 date 2012.01.09.15.16.31; author drochner; state Exp; branches; next 1.8; 1.8 date 2011.12.19.11.59.58; author drochner; state Exp; branches; next 1.7; 1.7 date 2007.11.16.21.15.20; author christos; state Exp; branches 1.7.52.1 1.7.56.1; next 1.6; 1.6 date 2005.12.11.12.25.05; author christos; state Exp; branches 1.6.44.1 1.6.46.1 1.6.50.1 1.6.52.1; next 1.5; 1.5 date 2004.04.26.03.50.57; author itojun; state Exp; branches 1.5.2.1 1.5.14.1; next 1.4; 1.4 date 2004.04.25.22.25.03; author jonathan; state Exp; branches; next 1.3; 1.3 date 2003.12.31.16.44.26; author jonathan; state Exp; branches; next 1.2; 1.2 date 2003.09.20.05.14.42; author itojun; state Exp; branches; next 1.1; 1.1 date 2003.09.12.11.20.58; author itojun; state Exp; branches; next ; 1.13.14.1 date 2020.04.25.11.24.06; author bouyer; state Exp; branches; next ; commitid d0banFLkg9JL4L5C; 1.12.26.1 date 2018.02.11.21.17.34; author snj; state Exp; branches; next ; commitid 1Pg5KdsmcZWRbuqA; 1.10.2.1 date 2013.06.23.06.20.26; author tls; state Exp; branches; next ; commitid eVjr9caYRQbRGHUw; 1.7.52.1 date 2012.04.17.00.08.46; author yamt; state Exp; branches; next 1.7.52.2; 1.7.52.2 date 2014.05.22.11.41.10; author yamt; state Exp; branches; next ; commitid VUUXuyNWnt3AKwBx; 1.7.56.1 date 2012.02.18.07.35.44; author mrg; state Exp; branches; next 1.7.56.2; 1.7.56.2 date 2012.04.05.21.33.48; author mrg; state Exp; branches; next ; 1.6.44.1 date 2007.11.21.21.56.12; author joerg; state Exp; branches; next ; 1.6.46.1 date 2008.01.09.01.57.41; author matt; state Exp; branches; next ; 1.6.50.1 date 2007.11.18.19.35.55; author bouyer; state Exp; branches; next ; 1.6.52.1 date 2007.11.19.00.49.17; author mjf; state Exp; branches; next ; 1.5.2.1 date 2004.04.26.03.50.57; author skrll; state dead; branches; next 1.5.2.2; 1.5.2.2 date 2004.08.03.10.55.29; author skrll; state Exp; branches; next 1.5.2.3; 1.5.2.3 date 2004.09.18.14.55.32; author skrll; state Exp; branches; next 1.5.2.4; 1.5.2.4 date 2004.09.21.13.37.48; author skrll; state Exp; branches; next ; 1.5.14.1 date 2007.12.07.17.34.39; author yamt; state Exp; branches; next ; desc @@ 1.15 log @Rename enc_xform_rijndael128 -> enc_xform_aes. Update netipsec dependency. @ text @# $Id: files.netipsec,v 1.14 2020/04/22 09:15:40 rin Exp $ # # defflag opt_ipsec.h IPSEC: opencrypto, aes defflag opt_ipsec.h IPSEC_DEBUG defflag opt_ipsec.h IPSEC_TX_TOS_CLEAR file netipsec/ipsec.c ipsec needs-flag file netipsec/ipsec_input.c ipsec file netipsec/ipsec_mbuf.c ipsec file netipsec/ipsec_output.c ipsec file netipsec/xform_ah.c ipsec file netipsec/xform_esp.c ipsec file netipsec/xform_ipcomp.c ipsec file netipsec/xform_ipip.c ipsec file netipsec/ipsec_netbsd.c ipsec file netipsec/key.c ipsec file netipsec/key_debug.c ipsec file netipsec/keysock.c ipsec file netipsec/xform_tcp.c ipsec & tcp_signature file netipsec/ipsecif.c ipsec & ipsecif @ 1.14 log @Make crypto/rijindael optional again as cprng_strong does no longer depend on it. Dependency is explicitly declared in files.foo if a component requires it. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.13 2018/01/10 10:56:30 knakahara Exp $ d4 1 a4 1 defflag opt_ipsec.h IPSEC: opencrypto, rijndael @ 1.13 log @add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by christos@@n.o, joerg@@n.o and ozaki-r@@n.o, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.12 2013/06/05 19:01:26 christos Exp $ d4 1 a4 1 defflag opt_ipsec.h IPSEC: opencrypto @ 1.13.14.1 log @Sync with bouyer-xenpvh-base2 (HEAD) @ text @d1 1 a1 1 # $Id$ d4 1 a4 1 defflag opt_ipsec.h IPSEC: opencrypto, rijndael @ 1.12 log @IPSEC has not come in two speeds for a long time now (IPSEC == kame, FAST_IPSEC). Make everything refer to IPSEC to avoid confusion. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.11 2013/06/04 22:47:37 christos Exp $ d6 1 d23 2 @ 1.12.26.1 log @Pull up following revision(s) (requested by ozaki-r in ticket #536): distrib/sets/lists/base/shl.mi: 1.825 distrib/sets/lists/comp/mi: 1.2168-1.2169 distrib/sets/lists/comp/shl.mi: 1.310 distrib/sets/lists/debug/mi: 1.234 distrib/sets/lists/debug/shl.mi: 1.188 distrib/sets/lists/man/mi: 1.1570 distrib/sets/lists/tests/mi: 1.772 etc/mtree/NetBSD.dist.tests: 1.150 share/man/man4/Makefile: 1.650 share/man/man4/ipsec.4: 1.42-1.43 share/man/man4/ipsecif.4: 1.1-1.5 sys/arch/amd64/conf/ALL: 1.77 sys/arch/amd64/conf/GENERIC: 1.480 sys/conf/files: 1.1191 sys/net/Makefile: 1.34 sys/net/files.net: 1.14 sys/net/if.c: 1.404 sys/net/if.h: 1.248 sys/net/if_gif.c: 1.135 sys/net/if_ipsec.c: 1.1-1.3 sys/net/if_ipsec.h: 1.1 sys/net/if_l2tp.c: 1.16 sys/net/if_types.h: 1.28 sys/netinet/in.c: 1.214 sys/netinet/in.h: 1.103 sys/netinet/in_gif.c: 1.92 sys/netinet/ip_var.h: 1.122 sys/netinet6/in6.c: 1.257 sys/netinet6/in6.h: 1.88 sys/netinet6/in6_gif.c: 1.90 sys/netinet6/ip6_var.h: 1.75 sys/netipsec/Makefile: 1.6 sys/netipsec/files.netipsec: 1.13 sys/netipsec/ipsec.h: 1.62 sys/netipsec/ipsecif.c: 1.1 sys/netipsec/ipsecif.h: 1.1 sys/netipsec/key.c: 1.246-1.247 sys/netipsec/key.h: 1.34 sys/rump/net/Makefile.rumpnetcomp: 1.20 sys/rump/net/lib/libipsec/IPSEC.ioconf: 1.1 sys/rump/net/lib/libipsec/Makefile: 1.1 sys/rump/net/lib/libipsec/ipsec_component.c: 1.1 tests/net/Makefile: 1.34 tests/net/if_ipsec/Makefile: 1.1 tests/net/if_ipsec/t_ipsec.sh: 1.1-1.2 Don't touch an SP without a reference to it unify processing to check nesting count for some tunnel protocols. add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by christos@@n.o, joerg@@n.o and ozaki-r@@n.o, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html ipsec(4) interface supports rump now. add ipsec(4) interface ATF. add ipsec(4) interface man as ipsecif.4. add ipsec(4) interface to amd64/GENERIC and amd64/ALL configs. apply in{,6}_tunnel_validate() to gif(4). Spell IPsec that way. Simplify macro usage. Sort SEE ALSO. Bump date for previous. Improve wording and macro use. Some parts are not clear to me, so someone with knowledge of ipsecif(4) should improve this some more. Improve ipsecif.4. Default port ipsec(4) NAT-T is tested now. pointed out by wiz@@n.o and suggested by ozaki-r@@n.o, thanks. Change the prefix of test names to ipsecif_ to distinguish from tests for ipsec(4) New sentence, new line. Remove empty macro. Fix PR kern/52920. Pointed out by David Binderman, thanks. Improve wording, and put a new drawing, from me and Kengo Nakahara. apply a little more #ifdef INET/INET6. fixes !INET6 builds. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.12 2013/06/05 19:01:26 christos Exp $ a5 1 defflag opt_ipsec.h IPSEC_TX_TOS_CLEAR a21 2 file netipsec/ipsecif.c ipsec & ipsecif @ 1.11 log @PR/47886: Dr. Wolfgang Stukenbrock: IPSEC_NAT_T enabled kernels may access outdated pointers and pass ESP data to UPD-sockets. While here, simplify the code and remove the IPSEC_NAT_T option; always compile nat-traversal in so that it does not bitrot. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.10 2012/03/22 20:34:42 drochner Exp $ d4 1 a4 2 defflag opt_ipsec.h FAST_IPSEC: opencrypto defflag opt_ipsec.h IPSEC: FAST_IPSEC d7 9 a15 9 file netipsec/ipsec.c fast_ipsec needs-flag file netipsec/ipsec_input.c fast_ipsec file netipsec/ipsec_mbuf.c fast_ipsec file netipsec/ipsec_output.c fast_ipsec file netipsec/xform_ah.c fast_ipsec file netipsec/xform_esp.c fast_ipsec file netipsec/xform_ipcomp.c fast_ipsec file netipsec/xform_ipip.c fast_ipsec file netipsec/ipsec_netbsd.c fast_ipsec d17 3 a19 3 file netipsec/key.c fast_ipsec file netipsec/key_debug.c fast_ipsec file netipsec/keysock.c fast_ipsec d21 1 a21 1 file netipsec/xform_tcp.c fast_ipsec & tcp_signature @ 1.10 log @remove KAME IPSEC, replaced by FAST_IPSEC @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.9 2012/01/09 15:16:31 drochner Exp $ a5 1 defflag opt_ipsec.h IPSEC_NAT_T @ 1.10.2.1 log @resync from head @ text @d1 1 a1 1 # $Id$ d4 3 a6 1 defflag opt_ipsec.h IPSEC: opencrypto d9 9 a17 9 file netipsec/ipsec.c ipsec needs-flag file netipsec/ipsec_input.c ipsec file netipsec/ipsec_mbuf.c ipsec file netipsec/ipsec_output.c ipsec file netipsec/xform_ah.c ipsec file netipsec/xform_esp.c ipsec file netipsec/xform_ipcomp.c ipsec file netipsec/xform_ipip.c ipsec file netipsec/ipsec_netbsd.c ipsec d19 3 a21 3 file netipsec/key.c ipsec file netipsec/key_debug.c ipsec file netipsec/keysock.c ipsec d23 1 a23 1 file netipsec/xform_tcp.c ipsec & tcp_signature @ 1.9 log @Make FAST_IPSEC the default IPSEC implementation which is built into the kernel if the "IPSEC" kernel option is given. The old implementation is still available as KAME_IPSEC. Do some minimal manpage adjustment -- kame_ipsec(4) is a copy of the old ipsec(4) and the latter is now a copy of fast_ipsec(4). @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.8 2011/12/19 11:59:58 drochner Exp $ d6 1 @ 1.8 log @rename the IPSEC in-kernel CPP variable and config(8) option to KAME_IPSEC, and make IPSEC define it so that existing kernel config files work as before Now the default can be easily be changed to FAST_IPSEC just by setting the IPSEC alias to FAST_IPSEC. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.7 2007/11/16 21:15:20 christos Exp $ d5 1 a5 2 # notyet #defflag opt_ipsec.h IPSEC: FAST_IPSEC @ 1.7 log @defflag IPSEC_DEBUG @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.6 2005/12/11 12:25:05 christos Exp $ d5 2 @ 1.7.52.1 log @sync with head @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.7 2007/11/16 21:15:20 christos Exp $ a4 2 defflag opt_ipsec.h IPSEC: FAST_IPSEC defflag opt_ipsec.h IPSEC_NAT_T @ 1.7.52.2 log @sync with head. for a reference, the tree before this commit was tagged as yamt-pagecache-tag8. this commit was splitted into small chunks to avoid a limitation of cvs. ("Protocol error: too many arguments") @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.7.52.1 2012/04/17 00:08:46 yamt Exp $ d4 3 a6 1 defflag opt_ipsec.h IPSEC: opencrypto d9 9 a17 9 file netipsec/ipsec.c ipsec needs-flag file netipsec/ipsec_input.c ipsec file netipsec/ipsec_mbuf.c ipsec file netipsec/ipsec_output.c ipsec file netipsec/xform_ah.c ipsec file netipsec/xform_esp.c ipsec file netipsec/xform_ipcomp.c ipsec file netipsec/xform_ipip.c ipsec file netipsec/ipsec_netbsd.c ipsec d19 3 a21 3 file netipsec/key.c ipsec file netipsec/key_debug.c ipsec file netipsec/keysock.c ipsec d23 1 a23 1 file netipsec/xform_tcp.c ipsec & tcp_signature @ 1.7.56.1 log @merge to -current. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.9 2012/01/09 15:16:31 drochner Exp $ a4 1 defflag opt_ipsec.h IPSEC: FAST_IPSEC @ 1.7.56.2 log @sync to latest -current. @ text @d1 1 a1 1 # $Id$ a5 1 defflag opt_ipsec.h IPSEC_NAT_T @ 1.6 log @merge ktrace-lwp. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.5.2.3 2004/09/21 13:37:48 skrll Exp $ d5 1 @ 1.6.46.1 log @sync with HEAD @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.6 2005/12/11 12:25:05 christos Exp $ a4 1 defflag opt_ipsec.h IPSEC_DEBUG @ 1.6.44.1 log @Sync with HEAD. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.7 2007/11/16 21:15:20 christos Exp $ a4 1 defflag opt_ipsec.h IPSEC_DEBUG @ 1.6.52.1 log @Sync with HEAD. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.7 2007/11/16 21:15:20 christos Exp $ a4 1 defflag opt_ipsec.h IPSEC_DEBUG @ 1.6.50.1 log @Sync with HEAD @ text @d1 1 a1 1 # $Id$ a4 1 defflag opt_ipsec.h IPSEC_DEBUG @ 1.5 log @xform_tcp.c is needed only with FAST_IPSEC @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.4 2004/04/25 22:25:03 jonathan Exp $ @ 1.5.2.1 log @file files.netipsec was added on branch ktrace-lwp on 2004-08-03 10:55:29 +0000 @ text @d1 20 @ 1.5.2.2 log @Sync with HEAD @ text @a0 20 # $Id: files.netipsec,v 1.5.2.1 2004/08/03 10:55:29 skrll Exp $ # # defflag opt_ipsec.h FAST_IPSEC: opencrypto file netipsec/ipsec.c fast_ipsec needs-flag file netipsec/ipsec_input.c fast_ipsec file netipsec/ipsec_mbuf.c fast_ipsec file netipsec/ipsec_output.c fast_ipsec file netipsec/xform_ah.c fast_ipsec file netipsec/xform_esp.c fast_ipsec file netipsec/xform_ipcomp.c fast_ipsec file netipsec/xform_ipip.c fast_ipsec file netipsec/ipsec_netbsd.c fast_ipsec file netipsec/key.c fast_ipsec file netipsec/key_debug.c fast_ipsec file netipsec/keysock.c fast_ipsec file netipsec/xform_tcp.c fast_ipsec & tcp_signature @ 1.5.2.3 log @Sync with HEAD. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.5.2.2 2004/09/18 14:55:32 skrll Exp $ @ 1.5.2.4 log @Fix the sync with head I botched. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.5.2.3 2004/09/21 13:37:48 skrll Exp $ @ 1.5.14.1 log @sync with head @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.5 2004/04/26 03:50:57 itojun Exp $ a4 1 defflag opt_ipsec.h IPSEC_DEBUG @ 1.4 log @Initial commit of a port of the FreeBSD implementation of RFC 2385 (MD5 signatures for TCP, as used with BGP). Credit for original FreeBSD code goes to Bruce M. Simpson, with FreeBSD sponsorship credited to sentex.net. Shortening of the setsockopt() name attributed to Vincent Jardin. This commit is a minimal, working version of the FreeBSD code, as MFC'ed to FreeBSD-4. It has received minimal testing with a ttcp modified to set the TCP-MD5 option; BMS's additions to tcpdump-current (tcpdump -M) confirm that the MD5 signatures are correct. Committed as-is for further testing between a NetBSD BGP speaker (e.g., quagga) and industry-standard BGP speakers (e.g., Cisco, Juniper). NOTE: This version has two potential flaws. First, I do see any code that verifies recieved TCP-MD5 signatures. Second, the TCP-MD5 options are internally padded and assumed to be 32-bit aligned. A more space-efficient scheme is to pack all TCP options densely (and possibly unaligned) into the TCP header ; then do one final padding to a 4-byte boundary. Pre-existing comments note that accounting for TCP-option space when we add SACK is yet to be done. For now, I'm punting on that; we can solve it properly, in a way that will handle SACK blocks, as a separate exercise. In case a pullup to NetBSD-2 is requested, this adds sys/netipsec/xform_tcp.c ,and modifies: sys/net/pfkeyv2.h,v 1.15 sys/netinet/files.netinet,v 1.5 sys/netinet/ip.h,v 1.25 sys/netinet/tcp.h,v 1.15 sys/netinet/tcp_input.c,v 1.200 sys/netinet/tcp_output.c,v 1.109 sys/netinet/tcp_subr.c,v 1.165 sys/netinet/tcp_usrreq.c,v 1.89 sys/netinet/tcp_var.h,v 1.109 sys/netipsec/files.netipsec,v 1.3 sys/netipsec/ipsec.c,v 1.11 sys/netipsec/ipsec.h,v 1.7 sys/netipsec/key.c,v 1.11 share/man/man4/tcp.4,v 1.16 lib/libipsec/pfkey.c,v 1.20 lib/libipsec/pfkey_dump.c,v 1.17 lib/libipsec/policy_token.l,v 1.8 sbin/setkey/parse.y,v 1.14 sbin/setkey/setkey.8,v 1.27 sbin/setkey/token.l,v 1.15 Note that the preceding two revisions to tcp.4 will be required to cleanly apply this diff. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.3 2003/12/31 16:44:26 jonathan Exp $ d20 1 a20 1 file netipsec/xform_tcp.c tcp_signature @ 1.3 log @Split opencrypto configuration into an attribute, usable by inkernel clients, and a pseudo-device for userspace access. The attribute is named `opencrypto'. The pseudo-device is renamed to "crypto", which has a dependency on "opencrypto". The sys/conf/majors entry and pseudo-device attach entrypoint are updated to match the new pseudo-device name. Fast IPsec (sys/netipsec/files.ipsec) now lists a dependency on the "opencrypto" attribute. Drivers for crypto accelerators (ubsec, hifn775x) also pull in opencrypto, as providers of opencrypto transforms. @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.2 2003/09/20 05:14:42 itojun Exp $ d19 2 @ 1.2 log @separate netkey/key* and netipsec/key* @ text @d1 1 a1 1 # $Id: files.netipsec,v 1.1 2003/09/12 11:20:58 itojun Exp $ d4 1 a4 1 defflag opt_ipsec.h FAST_IPSEC @ 1.1 log @merge netipsec/key* into netkey/key*. no need for both. change confusing filename @ text @d1 1 a1 1 # $Id: files.ipsec,v 1.3 2003/09/12 11:09:30 itojun Exp $ d15 4 @