Permalink
Commits on Jul 23, 2000
  1. * sys/netinet6/esp_core.c: cache intermediate key for ESP encryption

      algorithms, into SAs.  this will drastically improve performance
      for algorithms with long key setup time (blowfish).
      KAME PR 229.  suggested by sommerfeld.
    itojun committed Jul 23, 2000
  2. add an DIAGNOSTIC case for MCLBYTES assumption

    itojun committed Jul 23, 2000
Commits on Jul 22, 2000
  1. use latest ipv6 patch. (7/21/2000)

    sumikawa committed Jul 22, 2000
Commits on Jul 21, 2000
  1. * kame/kame/racoon:

    Trying to conform with draft-ietf-mobileip-ipv6-12.  If "support_mip6"
    in remote directive is on, both values of ID payloads in phase 2
    exchange are always used as the addresses of end-point of IPsec-SAs.
    sakane committed Jul 21, 2000
  2. try to conform with draft-ietf-mobileip-ipv6-12. If "support_mip6" in…

    … remote
    
    directive is on, both values of ID payloads in phase 2 exchange are always
    used as the addresses of end-point of IPsec-SAs.
    sakane committed Jul 21, 2000
  3. * netbsd/pkgsrc/mail/sendmail.beta: use 8.11.0.

    * netbsd/pkgsrc/net/netperf: use the latest IPv6 patch (7/21).
    itojun committed Jul 21, 2000
  4. use latest ipv6 patch. (7/21/2000)

    itojun committed Jul 21, 2000
  5. bsdi3/sys/net/if_p2psubr.c needs in6_ifdetach()

    itojun committed Jul 21, 2000
  6. included <sys/queue.h> if necessary (mainly because in6_var.h

    need this header file...)
    jinmei committed Jul 21, 2000
  7. 2000-07-21 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/kame/bgpd/bgp.c: clarification about the advanced API;
    	do not use IPV6_PKTOPTIONS in pure RFC2292 (i.e. not 2292bis)
    	paths.
    jinmei committed Jul 21, 2000
  8. corrected config dump.

    jinmei committed Jul 21, 2000
  9. Added several changes of racoon during TAHI test event.

    Tue Jul 18 JST 2000 sakane@ydc.co.jp
    	* kame/kame/racoon:
    	- don't send notify message in processing of information exchange.
    	- fixed a possible memory leak when error occure.
    	- added some message about comparing each values in proposal.
    	- improved to delete phase1 SA when delete message is received OR
    	  initial contact is received.
    
    Mon Jul 17 JST 2000 sakane@ydc.co.jp
    	* kame/kame/racoon:
    	- commented when id payload of subnet type with full bit masked.
    
    Sun Jul 16 JST 2000 sakane@ydc.co.jp
    	* kame/kame/racoon:
    	- commented when id payload of subnet type with full bit masked.
    	- racoon.conf are updated about padding option.
    
    Sat Jul 15 JST 2000 sakane@ydc.co.jp
    	* kame/kame/racoon:
    	- fixed the place of checking whether delete payload is protected
    	  when delete notification is received.
    	- When a IKE node receive a delete payload, the node always delete
    	  outbount SAs only.  So destination IP address have to check before
    	  SA will be deleted.
    	- Delete phase 1 handler when a delete notification has been received.
    	  Renamed purge_spi() to purge_ipsec_spi() accompanied with above
    	  chanege.
    	- commented about the reason why we don't send delete payload
    	  for outbound SAs.
    	- added a option to randomize values in a padding.  clarified to
    	  randomize length.
    	- fixed some of memory leak.
    
    Fri Jul 14 JST 2000 sakane@ydc.co.jp
    	* kame/kame/racoon:
    	- enable to switch sending initial contact.
    	- try to send delete payload on phase 1 when phase 1 sa is deleted
    	- fixed to compare address family in two sockaddrs.
    	- fixed making a length of IPv6 ID payload.  it was used a length of
    	  struct in_addr.
    	- fixed a part of sending a notification on phase 2.
    	- fixed making a ID payload of type of IPv4 address.  There was
    	  unnecessary space in a address part.
    sakane committed Jul 21, 2000
  10. disabled in6_ifdetach() for bsdi

    (just for cleanup)
    jinmei committed Jul 21, 2000
  11. remove unnecessary spl in blowfish code (now achieves 24Mbps on PenII…

    …-300
    
    loopback with blowfish-cbc, transport mode, 128bit key).
    improve code-sharing.  some netbsd KNF.
    itojun committed Jul 21, 2000
Commits on Jul 20, 2000
  1. speedup esp encryption, by pre-computing intermediate key. now

    blowfish-cbc yields 15Mbps.  suggested by sommerfeld@netbsd.org.
    
    XXX UPDATE pfkey message code (netkey/key.c) seems to have possibility for
    memory leak.  if we transmit UPDATE more than once for a sa, the code
    would overwrite key_enc/auth.  is my observation correct?
    itojun committed Jul 20, 2000
  2. corrected BGP interface manupilation, especially about use of

    the (new and old) advanced API according to a suggestion from itojun
    (kame-snap 2949).
    jinmei committed Jul 20, 2000
  3. do not rely upon algorithm name ordering

    itojun committed Jul 20, 2000
  4. sys/queue.h (freebsd2)

    itojun committed Jul 20, 2000
  5. sys/queue.h

    itojun committed Jul 20, 2000
  6. sys/netinet6/*var.h require sys/queue.h

    itojun committed Jul 20, 2000
  7. improve english in comment

    itojun committed Jul 20, 2000
  8. improve english in comment

    itojun committed Jul 20, 2000
Commits on Jul 19, 2000
  1. * freebsd3/ports/{libpcap,tcpdump}: use 7/17 weekly snap.

    * freebsd3/ports/mtr: use latest IPv6 patch.
    sumikawa committed Jul 19, 2000
  2. upgrade to 07/17 weekly snap.

    sumikawa committed Jul 19, 2000
  3. Upgrade IPv6 patch to 20000719.

    It fixes the problem mtr does not work on IPv4-only kernel.
    
    PR:		ports/19339 (FreeBSD)
    Submitted by:	kbyanc@posi.net
    sumikawa committed Jul 19, 2000
  4. make compilable on KLD modules in freebsd4.

    sumikawa committed Jul 19, 2000
  5. rename. previous commit was mistaken.

    sakane committed Jul 19, 2000
  6. some pattern of IPsec environment.

    sakane committed Jul 19, 2000
  7. netbsd-current does not have rc5-cbc

    itojun committed Jul 19, 2000
  8. * kame/rtsold/rtsol.c, kame/rtadvd/rtadvd.c: ip6_var.h requires

      sys/queue.h.
    * netbsd/pkgsrc/net/{libpcap,tcpdump}: use 7/17 weekly snap.
    itojun committed Jul 19, 2000
  9. use 7/17 weekly snap

    itojun committed Jul 19, 2000