16394 illumos should learn that the getopt(3C) family return int
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com>
Reviewed by: Andy F

16394 illumos should learn that the getopt(3C) family return int
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com>
Reviewed by: Andy Fiddaman <illumos@fiddaman.net>
Approved by: Gordon Ross <gordon.w.ross@gmail.com>

show more ...

15756 ipsecutils: the comparison will always evaluate as 'true'
Reviewed by: Bill Sommerfeld <sommerfeld@alum.mit.edu>
Reviewed by: Dan McDonald <danmcd@mnx.io>
Approved by: Robert Mustac

15756 ipsecutils: the comparison will always evaluate as 'true'
Reviewed by: Bill Sommerfeld <sommerfeld@alum.mit.edu>
Reviewed by: Dan McDonald <danmcd@mnx.io>
Approved by: Robert Mustacchi <rm@fingolfin.org>

show more ...

15687 Remove compiler flags that only mean something to Sun Studio
Reviewed by: Andy Fiddaman <illumos@fiddaman.net>
Reviewed by: Dan Cross <cross@oxidecomputer.com>
Reviewed by: Robert M

15687 Remove compiler flags that only mean something to Sun Studio
Reviewed by: Andy Fiddaman <illumos@fiddaman.net>
Reviewed by: Dan Cross <cross@oxidecomputer.com>
Reviewed by: Robert Mustacchi <rm+illumos@fingolfin.org>
Reviewed by: Toomas Soome <tsoome@me.com>
Approved by: Dan McDonald <danmcd@mnx.io>

show more ...

14443 resection manual pages per IPD4
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Robert Mustacchi <rm@fingolfin.org>
Reviewed by: Peter Tribble <peter.tribble@gmail.com>
R

14443 resection manual pages per IPD4
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Robert Mustacchi <rm@fingolfin.org>
Reviewed by: Peter Tribble <peter.tribble@gmail.com>
Reviewed by: Andy Fiddaman <andy@omnios.org>
Approved by: Dan McDonald <danmcd@joyent.com>

show more ...

11528 Makefile.noget can get gone
11529 Use -Wno-maybe-initialized
Reviewed by: Peter Tribble <peter.tribble@gmail.com>
Reviewed by: Toomas Soome <tsoome@me.com>
Approved by: Robert M

11528 Makefile.noget can get gone
11529 Use -Wno-maybe-initialized
Reviewed by: Peter Tribble <peter.tribble@gmail.com>
Reviewed by: Toomas Soome <tsoome@me.com>
Approved by: Robert Mustacchi <rm@joyent.com>

show more ...

11296 cmd-inet: NULL pointer errors
Reviewed by: Andy Stormont <astormont@racktopsystems.com>
Reviewed by: Garrett D'Amore <garrett@damore.org>
Approved by: Garrett D'Amore <garrett@damor

11296 cmd-inet: NULL pointer errors
Reviewed by: Andy Stormont <astormont@racktopsystems.com>
Reviewed by: Garrett D'Amore <garrett@damore.org>
Approved by: Garrett D'Amore <garrett@damore.org>

show more ...

10080 smatch Makefile changes for usr/src/cmd
Reviewed by: Andy Fiddaman <andy@omniosce.org>
Approved by: Robert Mustacchi <rm@joyent.com>

9296 ipsecutils: this statement may fall through
Reviewed by: Jason King <jason.brian.king@gmail.com>
Reviewed by: Andy Fiddaman <omnios@citrus-it.net>
Approved by: Gordon Ross <gwr@nexen

9296 ipsecutils: this statement may fall through
Reviewed by: Jason King <jason.brian.king@gmail.com>
Reviewed by: Andy Fiddaman <omnios@citrus-it.net>
Approved by: Gordon Ross <gwr@nexenta.com>

show more ...

8655 remove more gender specific language
Reviewed by: Jim Salter <github@jrs-s.net>
Reviewed by: Serapheim Dimitropoulos <serapheim@delphix.com>
Reviewed by: Prakash Surya <prakash.surya

8655 remove more gender specific language
Reviewed by: Jim Salter <github@jrs-s.net>
Reviewed by: Serapheim Dimitropoulos <serapheim@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Matt Ahrens <mahrens@delphix.com>
Approved by: Robert Mustacchi <rm@joyent.com>

show more ...

7812 Remove gender specific language
Reviewed by: Matt Ahrens <mahrens@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Steve Gonczi <steve.gonczi@delphix.

7812 Remove gender specific language
Reviewed by: Matt Ahrens <mahrens@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Steve Gonczi <steve.gonczi@delphix.com>
Reviewed by: Chris Williamson <chris.williamson@delphix.com>
Reviewed by: George Wilson <george.wilson@delphix.com>
Reviewed by: Igor Kozhukhov <igor@dilos.org>
Reviewed by: Dan McDonald <danmcd@omniti.com>
Reviewed by: Robert Mustacchi <rm@joyent.com>
Approved by: Richard Lowe <richlowe@richlowe.net>

show more ...

2933 compiler warning gags need better granularity
Reviewed by: Eric Schrock <eric.schrock@delphix.com>
Approved by: Garrett D'Amore <garrett@damore.org>

2802 ipsecalgs needs a dependency upon filesystem
Reviewed by: Kartik Mistry <kartik.mistry@gmail.com>
Reviewed by: Alexander Eremin <alexander.r.eremin@gmail.com>
Reviewed by: Jason King

2802 ipsecalgs needs a dependency upon filesystem
Reviewed by: Kartik Mistry <kartik.mistry@gmail.com>
Reviewed by: Alexander Eremin <alexander.r.eremin@gmail.com>
Reviewed by: Jason King <jason.brian.king@gmail.com>
Reviewed by: Dan McDonald <danmcd@nexenta.com>
Approved by: Richard Lowe <richlowe@richlowe.net>

show more ...

6945640 ipseckey won't create SA between ipv6 link-local and multicast address; dumps core instead
6949084 pfp_delete_rule() has use-after-free problem

PSARC 2010/101 in.iked preshared key file extensions
6511591 Support at least remote-prefixes for preshared key entries

6440625 ipsecconf: unresolvable address should give specific error message
6925293 ipsecconf(1M) needs a receive-buffer increase for SPD_DUMP
6925300 combined-mode check in ipsecconf(1M) is i

6440625 ipsecconf: unresolvable address should give specific error message
6925293 ipsecconf(1M) needs a receive-buffer increase for SPD_DUMP
6925300 combined-mode check in ipsecconf(1M) is inaccurate, will fail with libumem
6925307 combined-mode ciphers shouldn't expand with encr_auth_algs when "any" is present.

show more ...

PSARC 2010/102 ikeadm dump algs
6927650 provide the list of DH groups in ikeadm
6927657 provide the list of algorithms offered by iked for IKE in ikeadm

PSARC 2010/055 ECP and RFC5114 groups for IKE
6586320 RFC 4753 ECP groups needed for IKE
6900895 RFC 5114 ECP Diffie-Hellman groups
6897862 RFC 5114 integer modulus Diffie-Hellman groups

6913939 'ipseckey get esp inbound' cores

6874992 in.iked does not use network byte order for IP address in sendto() call
6874983 ikedoor.h is not C++ safe
6885833 IPsec utilities should print lifetimes in human readable format
6

6874992 in.iked does not use network byte order for IP address in sendto() call
6874983 ikedoor.h is not C++ safe
6885833 IPsec utilities should print lifetimes in human readable format
6889086 ikeadm reports kilobyte lifetimes with wrong units
6898492 iked should enforce lower maximum values for lifetimes
6897711 iked debug output should be less confusing for average sysadmin
6902926 SOFT kilobyte expires for inbound SAs should make it to userland and be reacted upon

show more ...

6665041 refresh of svc:/network/ipsec/policy merges when it should replace

6900753 Calls to dump_key in ikeadm.c could be refactored
6896962 ipsecconf incorrectly parses misconfigured hyphenated tokens
6898695 ipsecalgs -s causes kernel buffer corruption
6440628

6900753 Calls to dump_key in ikeadm.c could be refactored
6896962 ipsecconf incorrectly parses misconfigured hyphenated tokens
6898695 ipsecalgs -s causes kernel buffer corruption
6440628 ipseckey should ensure that argument is a file before parsing

show more ...

PSARC/2008/252 Labeled IPsec phase 1
6886771 Labeled IPsec phase 1
6808727 Alignment error panic in tsol_can_accept_raw()
6894979 nightly -0 + -p builds then destroys SUNW0on

PSARC 2009/513 Changes to IPsec ESP to support Combined mode ciphers
6704686 IPsec/ESP needs to support Combined mode ciphers
6704682 IPsec/ESP should use AES-CCM
6884664 IPsec/ESP should

PSARC 2009/513 Changes to IPsec ESP to support Combined mode ciphers
6704686 IPsec/ESP needs to support Combined mode ciphers
6704682 IPsec/ESP should use AES-CCM
6884664 IPsec/ESP should support AES-GCM Mode
6840342 ipsecalgs out of memory error
6764184 tab instead of space in sadb.h

show more ...

6869318 ipsecconf(1M) should warn users that encryption without authentication is bad.

6824443 Make in.iked a 64-bit process when possible.