Andrey V. Elsukov 37604ec9de MFC r316759: ...

Add large replay widow support to setkey(8) and libipsec.

  When the replay window size is large than UINT8_MAX, add to the request
  the SADB_X_EXT_SA_REPLAY extension header that was added in r309144.

  Also add support of SADB_X_EXT_NAT_T_TYPE, SADB_X_EXT_NAT_T_SPORT,
  SADB_X_EXT_NAT_T_DPORT, SADB_X_EXT_NAT_T_OAI, SADB_X_EXT_NAT_T_OAR,
  SADB_X_EXT_SA_REPLAY, SADB_X_EXT_NEW_ADDRESS_SRC, SADB_X_EXT_NEW_ADDRESS_DST
  extension headers to the key_debug that is used by `setkey -x`.

  Modify kdebug_sockaddr() to use inet_ntop() for IP addresses formatting.
  And modify kdebug_sadb_x_policy() to show policy scope and priority.

  Reviewed by:	gnn, Emeric Poupon
  Differential Revision:	https://reviews.freebsd.org/D10375

2017-04-27 12:16:58 +00:00

..

ipsec_dump_policy.c

…

ipsec_get_policylen.c

…

ipsec_set_policy.3

…

ipsec_strerror.3

…

ipsec_strerror.c

…

ipsec_strerror.h

…

libpfkey.h

…

Makefile

First pass through library packaging.

2016-02-04 21:16:35 +00:00

Makefile.depend

DIRDEPS_BUILD: Regenerate without local dependencies.

2016-02-24 17:20:11 +00:00

pfkey_dump.c

MFC r304572 (by bz):

2017-03-18 22:04:20 +00:00

pfkey.c

MFC r316759:

2017-04-27 12:16:58 +00:00

policy_parse.y

…

policy_token.l

…

test-policy.c

…