Andrey V. Elsukov 3f44ee8e99 Add support for dummy ESP packets with next header field equal to ... IPPROTO_NONE. According to RFC4303 2.6 they should be silently dropped. Submitted by: aurelien.cazuc.external_stormshield.eu MFC after: 10 days Sponsored by: Stormshield Differential Revision: https://reviews.freebsd.org/D22557		2019-11-27 10:24:46 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
ipcomp_var.h
ipcomp.h
ipsec6.h
ipsec_input.c
ipsec_mbuf.c
ipsec_mod.c
ipsec_output.c
ipsec_pcb.c
ipsec_support.h
ipsec.c	Fix broken window replay check that will allow old packet to be accepted.	2019-09-06 14:30:23 +00:00
ipsec.h	Make the warning intervals for deprecated crypto algorithms tunable.	2019-06-11 23:00:55 +00:00
key_debug.c
key_debug.h
key_var.h
key.c	Add missing new line in several log messages.	2019-08-09 08:58:09 +00:00
key.h
keydb.h
keysock.c
keysock.h
subr_ipsec.c
udpencap.c
xform_ah.c	netinet*: replace IP6_EXTHDR_GET()	2019-11-15 21:44:17 +00:00
xform_esp.c	Add support for dummy ESP packets with next header field equal to	2019-11-27 10:24:46 +00:00
xform_ipcomp.c	Widen NET_EPOCH coverage.	2019-10-07 22:40:05 +00:00
xform_tcp.c
xform.h