259065 |
07-Dec-2013 |
gjb |
- Copy stable/10 (r259064) to releng/10.0 as part of the 10.0-RELEASE cycle. - Update __FreeBSD_version [1] - Set branch name to -RC1
[1] 10.0-CURRENT __FreeBSD_version value ended at '55', so start releng/10.0 at '100' so the branch is started with a value ending in zero.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation |
256281 |
10-Oct-2013 |
gjb |
Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
245492 |
16-Jan-2013 |
eadler |
Correct prefix for "locally installed things"
Approved by: cperciva MFC After: 3 days
|
244318 |
16-Dec-2012 |
eadler |
Minor wording improvments to some manual pages
Approved by: bcr (mentor) Obtained from: DragonflyBSD (a5294ca835317c68c919ab43936da4f05ab6e926) MFC after: 3 days
|
236502 |
03-Jun-2012 |
joel |
Minor mdoc improvements.
|
235400 |
13-May-2012 |
joel |
Minor mdoc nits.
|
233522 |
26-Mar-2012 |
joel |
mdoc: correct .Bd/.Bl arguments.
Reviewed by: brueffer
|
233458 |
25-Mar-2012 |
joel |
Remove superfluous paragraph macro.
|
222599 |
02-Jun-2011 |
uqs |
mdoc: fix markup
|
214054 |
19-Oct-2010 |
uqs |
mdoc: drop even more redundant .Pp calls
No change in rendered output, less mandoc lint warnings.
Tool provided by: Nobuyuki Koganemaru n-kogane at syd.odn.ne.jp
|
205672 |
26-Mar-2010 |
maxim |
o Fix typo.
PR: docs/145031 Submitted by: olgeni MFC after: 1 week
|
202386 |
15-Jan-2010 |
ru |
Use the newly brought %U macro.
|
183456 |
29-Sep-2008 |
maxim |
o Add missed dot.
|
175248 |
12-Jan-2008 |
maxim |
o Allow setkey(8) to recognize esp as a protocoal name for spdadd.
PR: bin/107392 Submitted by: Eugene Grosbein MFC after: 1 month
|
173412 |
07-Nov-2007 |
kevlo |
Cleanup of userland __P use
|
171135 |
01-Jul-2007 |
gnn |
Commit IPv6 support for FAST_IPSEC to the tree. This commit includes all remaining changes for the time being including user space updates.
Submitted by: bz Approved by: re
|
169425 |
09-May-2007 |
gnn |
Integrate the Camellia Block Cipher. For more information see RFC 4132 and its bibliography.
Submitted by: Tomoyuki Okazaki <okazaki at kick dot gr dot jp> MFC after: 1 month
|
162395 |
18-Sep-2006 |
ru |
Markup fixes.
|
160747 |
27-Jul-2006 |
yar |
Obey MK_INET6_SUPPORT. This is also a good chance to apply style.Makefile(5) in some cases.
|
158515 |
13-May-2006 |
pjd |
Include other AES key lengths in the comment.
|
154117 |
08-Jan-2006 |
gnn |
Langauge fixes required to disambiguate some statements.
Explain the examples.
|
151293 |
13-Oct-2005 |
ume |
fixed a crush when either -lh or -ls option is used.
Obtained from: KAME
|
151291 |
13-Oct-2005 |
ume |
setkey(8) is not WARNS=2 compliant, yet.
|
141580 |
09-Feb-2005 |
ru |
Fixed the misplaced $FreeBSD$.
|
140368 |
17-Jan-2005 |
ru |
Added the EXIT STATUS section where appropriate.
|
140294 |
15-Jan-2005 |
ru |
Fixed display type.
|
130134 |
05-Jun-2004 |
ru |
Reapply traditionally lost fixes, fixed some more. This manpage needs an English clenup.
|
129183 |
13-May-2004 |
ume |
check if the null encryption is supported or not.
Requested by: bms Obtained from: KAME
|
127684 |
31-Mar-2004 |
bms |
Fix regression in setkey whereby parser would fail to recognise tcp as both a security protocol and an upper level protocol for encapsulation.
PR: bin/63616 Submitted by: ume@
|
126843 |
11-Mar-2004 |
bde |
Fixed mispellings of '\0' as NULL.
|
125681 |
11-Feb-2004 |
bms |
Initial import of RFC 2385 (TCP-MD5) digest support.
This is the second of two commits; bring in the userland support to finish.
Teach libipsec and setkey about the tcp-md5 class of security associations, thus allowing administrators to add per-host keys to the SADB for use by the tcpsignature_compute() function.
Document that a single SPI must be used until such time as the code which adds support to the SPD to specify flows for tcp-md5 treatment is suitable for production.
Sponsored by: sentex.net
|
122412 |
10-Nov-2003 |
ume |
enable aes-xcbc-mac and aes-ctr, again.
|
122108 |
05-Nov-2003 |
ume |
- do hexdump on send. set length field properly - check for encryption/authentication key together with algorithm. - warned if a deprecated encryption algorithm (that includes "simple") is specified. - changed the syntax how to define a policy of a ICMPv6 type and/or a code, like spdadd ::/0 ::/0 icmp6 134,0 -P out none; - random cleanup in parser. - use yyfatal, or return -1 after yyerror. - deal with strdup() failure. - permit scope notation in policy string (-P esp/tunnel/foo%scope-bar%scope/use) - simplify /prefix and [port]. - g/c some unused symbols.
Obtained from: KAME
|
121155 |
17-Oct-2003 |
ume |
- style - rename variable - use strlcpy - const'fy
Obtained from: KAME
|
121071 |
13-Oct-2003 |
ume |
- support AES counter mode for ESP. - use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing.
Obtained from: KAME
|
121061 |
13-Oct-2003 |
ume |
- support AES XCBC MAC for AH - correct SADB_X_AALG_RIPEMD160HMAC to 8
Obtained from: KAME
|
121021 |
12-Oct-2003 |
ume |
- RIPEMD160 support - pass size arg to ah->result (avoid assuming result buffer size)
Obtained from: KAME
|
113552 |
16-Apr-2003 |
sumikawa |
Use NI_xxx macros.
Obtained from: KAME MFC after: 1 week
|
108533 |
01-Jan-2003 |
schweikh |
Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, especially in troff files.
|
108317 |
27-Dec-2002 |
schweikh |
english(4) police.
|
100768 |
27-Jul-2002 |
fenner |
Fix spacing for -P (policy) examples.
|
100555 |
23-Jul-2002 |
blackend |
s/IPSEC/IPsec according to RFCs
PR: in part docs/38668 Reviewed by: charnier MFC after: 10 days
|
99968 |
14-Jul-2002 |
charnier |
The .Nm utility
|
96738 |
16-May-2002 |
ume |
Don't install scriptdump which is written in Perl. This is corresponding to removal of Perl from base system.
|
81449 |
10-Aug-2001 |
ru |
mdoc(7) police: protect trailing full stops of abbreviations with a trailing zero-width space: `e.g.\&'.
|
81298 |
08-Aug-2001 |
sheldonh |
can not -> cannot
|
81251 |
07-Aug-2001 |
ru |
mdoc(7) police:
Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block.
|
81215 |
06-Aug-2001 |
ume |
printed current sequence number of the SA. accordingly, changed into sadb_x_sa2_sequence from sadb_x_sa2_reserved3 in the sadb_x_sa2 structure. Also the output of setkey is changed. sequence number of the sadb is replaced to the end of the output.
Obtained from: KAME
|
80029 |
20-Jul-2001 |
obrien |
Perform a major cleanup of the usr.sbin Makefiles. These are not perfectly in agreement with each other style-wise, but they are orders of orders of magnitude more consistent style-wise than before.
|
79755 |
15-Jul-2001 |
dd |
Remove whitespace at EOL.
|
79366 |
06-Jul-2001 |
ru |
mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).
|
78064 |
11-Jun-2001 |
ume |
Sync with recent KAME. This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge.
TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT.
Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks
|
76750 |
17-May-2001 |
brian |
Allow ``ip4'' as an ``upperspec'' value, and update the man page with *all* the permissible values.
This should really be spelt ipencap (as /etc/protocols does), but a precedent has already been set by the ipproto array in setkey.c.
It would be nice if /etc/protocols was parsed for the upperspec field, but I don't do yacc/lex...
This change allows policies that only encrypt the encapsulated packets passing between the endpoints of a gif tunnel. Setting such a policy means that you can still talk directly (and unencrypted) between the public IP numbers with (say) ssh.
MFC after: 1 week
|
75670 |
18-Apr-2001 |
ru |
mdoc(7) police: normalize .Nd.
|
75286 |
07-Apr-2001 |
ru |
beforeinstall -> SCRIPTS.
|
74816 |
26-Mar-2001 |
ru |
- Backout botched attempt to introduce MANSECT feature. - MAN[1-9] -> MAN.
|
74532 |
20-Mar-2001 |
ru |
Set the default manual section for usr.sbin/ to 8.
|
71898 |
01-Feb-2001 |
ru |
mdoc(7) police: split punctuation characters + misc fixes.
|
70581 |
01-Jan-2001 |
ben |
Minor layout fixes.
PR: 24004 Submitted by: Jimmy Olgeni <olgeni@uli.it>
|
69640 |
05-Dec-2000 |
obrien |
Change the spelling of `.' to `.' from .OBJDIR since `.' really is where generated files land. Also give precedence to generated files.
|
69453 |
01-Dec-2000 |
obrien |
The GCC 2.96 snapshots have slightly different rules for finding include files. Mostly -I${.CURDIR} was needed -- especially for YACC generated files as the new cpp does not look in the ultimate source file (ie, the .y file)'s directory as told by the "#line" directive. Some were misspellings of "-I${.CURDIR}" as "-I.".
|
68965 |
20-Nov-2000 |
ru |
mdoc(7) police: use the new features of the Nm macro.
|
62583 |
04-Jul-2000 |
itojun |
synchronize with latest kame tree.
behavior change: policy syntax was changed. you may need to update your setkey(8) configuration files.
|
60595 |
15-May-2000 |
hoek |
Typo: "ealgo" -> "aalgo"
PR: docs/18547 (OKAZAKI Tetsurou <okazaki@be.to>)
|
60096 |
06-May-2000 |
phantom |
Fix typo
Noticed by: hoek
|
59851 |
01-May-2000 |
phantom |
. clear `.Os' macro value since this tool is not KAME only anymore . add integration note
|
58681 |
27-Mar-2000 |
bde |
Fixed missing DPADDs.
Fixed style bug for LDADD (don't use += for initial definitions).
|
57953 |
13-Mar-2000 |
shin |
Add missing end of semi colon of an example setkey command.
Submitted by: kuriyama
|
57942 |
12-Mar-2000 |
shin |
Typo fix. s/SAD/SPD/.
Specified by: jdp
|
57673 |
01-Mar-2000 |
sheldonh |
Remove single-space hard sentence breaks. These degrade the quality of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc.
|
57340 |
19-Feb-2000 |
shin |
Change IPv6 scoped addr format again based on recent standard discussion. Sorry for the flapping, but no change will be done for 4.0 anymore. Official standard will be published around April or later. If different format would be adopted at that time, then support for the new format will be added to the succeeding FreeBSD 4.x.
Approved by: jkh
|
55505 |
06-Jan-2000 |
shin |
libipsec and IPsec related apps. (and some KAME related man pages)
Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project
|