Steffen Klassert 7833aa05b8 xfrm: Check for the new replay implementation if an esn state is inserted ...

IPsec extended sequence numbers can be used only with the new
anti-replay window implementation. So check if the new implementation
is used if an esn state is inserted and return an error if it is not.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

2011-04-26 12:46:04 -07:00

..

Kconfig

ipsec: ipcomp - Merge IPComp implementations

2008-07-25 02:54:40 -07:00

Makefile

xfrm: Move IPsec replay detection functions to a separate file

2011-03-13 20:22:30 -07:00

xfrm_algo.c

xfrm: Pass name as const to xfrm_*_get_byname().

2011-02-27 23:04:45 -08:00

xfrm_hash.c

net: allow GFP_HIGHMEM in __vmalloc()

2010-11-21 10:04:04 -08:00

xfrm_hash.h

xfrm: Const'ify address args to hash helpers.

2011-02-23 23:07:42 -08:00

xfrm_input.c

xfrm: Move the test on replay window size into the replay check functions

2011-03-28 23:34:51 -07:00

xfrm_ipcomp.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

xfrm_output.c

dst: Clone child entry in skb_dst_pop

2011-03-27 17:55:01 -07:00

xfrm_policy.c

xfrm: Refcount destination entry on xfrm_lookup

2011-03-16 12:55:36 -07:00

xfrm_proc.c

xfrm: Introduce LINUX_MIB_XFRMFWDHDRERROR

2010-02-18 15:43:09 -08:00

xfrm_replay.c

xfrm: Fix replay window size calculation on initialization

2011-04-26 12:46:03 -07:00

xfrm_state.c

xfrm: Assign esn pointers when cloning a state

2011-03-28 23:34:52 -07:00

xfrm_sysctl.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

xfrm_user.c

xfrm: Check for the new replay implementation if an esn state is inserted

2011-04-26 12:46:04 -07:00