[zfs-crypto-discuss] 6403995 sadb_set_unique() needs to be revisited

Author: markfen Repository: /hg/zfs-crypto/gate Revision: 7ec87a41adeec1dcd842c0e8445b695c023589f2 Log message: 6403995 sadb_set_unique() needs to be revisited Files: update: usr/src/uts/common/inet/ip/sadb.c

[zfs-crypto-discuss] 6412600 IPsec SOFT EXPIRE inaccurately reports number of bytes protected by SA

Author: markfen Repository: /hg/zfs-crypto/gate Revision: ea6646e31b7d6941b25bd7557b7c12a68611b2bc Log message: 6412600 IPsec SOFT EXPIRE inaccurately reports number of bytes protected by SA Files: update: usr/src/uts/common/inet/ip/sadb.c

[zfs-crypto-discuss] PSARC 2006/138 Allow output queue length to be configured with ipsacq_maxpackets

Author: markfen Repository: /hg/zfs-crypto/gate Revision: f86d3cbb2659399aac8d2fa357c7bd99dc4bc843 Log message: PSARC 2006/138 Allow output queue length to be configured with ipsacq_maxpackets 6259998 IPsec discards packets while IKE exchange takes place 6284640 There should be a way to disable IPs

[zfs-crypto-discuss] 6296920 IPsec 3DES can't be used in two-key mode

Author: markfen Repository: /hg/zfs-crypto/gate Revision: ca1aafe8876ceace0d6a4a46d7b4db9181de14e8 Log message: 6296920 IPsec 3DES can't be used in two-key mode Files: update: usr/src/common/crypto/des/des_impl.c

[zfs-crypto-discuss] 6259973 IKE phase2 exchange fails to occur when phase1 SA near to expiry

Author: markfen Repository: /hg/zfs-crypto/gate Revision: 70e86e7f9e6cab38f9b1bcaa21a0a0d91af02e6c Log message: 6259973 IKE phase2 exchange fails to occur when phase1 SA near to expiry 6265403 Short-lived Phase I SAs get bitten by libike's retransmit-driven delayed cleanup 6268124 ikeadm won't rem

[zfs-crypto-discuss] 6214460 ipsecconf -a does not add with duplicated SPD's

Author: markfen Repository: /hg/zfs-crypto/gate Revision: 61395e9f3a4fa37ffbb6cf30ad7839dfb5abb917 Log message: 6214460 ipsecconf -a does not add with duplicated SPD's Files: update: usr/src/cmd/cmd-inet/usr.sbin/ipsecconf.c