			CHANGELOG for USAGI kit

$USAGI: CHANGELOG.USAGI,v 1.318 2002/02/18 06:14:52 yoshfuji Exp $

<200202>
2002/02/11,14	miyazawa
	* usagi/src/freeswan, usagi/usagi/pluto:
	IKE daemon derived from FreeS/WAN.
	It has been modified to to support our implementation.
	XXX: re-keying is broken because of the difference of 
	semantics of userland/kernel interaction between FreeS/WAN and ours.

<200201>
2002/01/31	takamiya
	* usagi/kernel/linux24/net/ipv6/mobile_ip6/ha.c: fixed to send
	Proxy Neighbor Advertisement for the link local address of mobile
	node derived from home address.

2002/01/30	takamiya
	* usagi/kernel/linux24/net/ipv6/mobile_ip6/{procrcv.c, bcache.h,
	bcache.c}: fixed not send to the old care-of address when
	the sequence number in the Binding Update is smaller than the Binding
	cache.

2002/01/28	takamiya
	* usagi/src/miplv6/mobile-ip6.in: fixed for the environment that
	doesn't have /sbin/ip.

2002/01/28	takamiya
	* src/miplv6/mobile-ip6.in, usagi/mipdiag/configure.in: fixed the
	wrong logic.

2002/01/28	takamiya
	* src/miplv6, usagi/{mipdiag,ipv6tunnel}: sync userland tool with
	HUT's MIPLV6 as of 2001/12/26.

2002/01/27	yoshfuji
	* kernel/linux24/net/ipv4/ipip.c: fixed inner header length check.
	* kernel/linux2{2,4}/net/ipv4/ipip.c: drop unsupported / unconfigured
	protocol.

2002/01/26	yoshfuji
	* kernel/linux2{2,4}/net/ipv6/addrconf.c: disable the Privacy 
	Extentions on loopback or over-ipv4 tunnels by default.
	We should not use temporary addresses especially on ISATAP tunnels.
	(recognized as a problem on 3rd TAHI interop event)

2002/01/24	takamiya
	* kernel/linux24/include/net/mipv6.h: modify alternate care-of
	address sub-option and authentication sub-option number following
	to the draft-15.

2002/01/24	yoshfuji
	* kernel/linux24/net/ipv6/ipsec6_utils.c: Zero-out mutable
	TLV (destination/hop-by-hop) options when calculating AH
	data.  (input from Joy Latten <latten@austin.ibm.com>)

2002/01/24	miyazawa, yoshfuji
	* kernel/linux24/include/linux/ip6packetootls.h,
	  kernel/linux24/net/ipv6/{ipsec6_input.c,ipsec6_output.c,
	  ipsec6_utils.c,ip6packettools.c}:
	fixed analyze_ip6_packet based on yoshifuji's patch to check over run

2002/01/24	serizawa
	* kernel/linux24/net/{atm/Makefile,Config.in}, doc/HOWTO/ATM:
	fix problem in case that linux24 kernel can not be compiled
	when CONFIG_ATM_IPV6 is defined without CONFIG_ATM_CLIP.

2002/01/22	takamiya
	* kernel/linux/net/ipv6/mobile_ip6/{dstopts.c,sendopts.c}:
	fixed the calculation of padding.

2002/01/22	mk
	* kernel/linux24/net/key/{pfkey_v2_msg.c,pfkey_v2_msg_add.c,sadb.c},
	  kernel/linux24/net/ipv6/{ipsec6_input.c,ipsec6_utils.c},
	  kernel/linux24/include/net/sadb.h:
	dynamic allocation cipher_context and digest_context in esp/auth_algo{}

2002/01/21	takamiya
	* kernel/linux24/net/ipv6/af_inet6.c: enable to make ipv6_tunnel.o
	staticaly linked.
	NOTE: When you make ipv6.o as a module and ipv6_tunnel.o as a
	      static, ipv6_tunnel.o is linked to ipv6.o.

2002/01/21	takamiya
	* kernel/linux24/net/netsyms.c: resolved conflicts of exported
	functions.

2002/01/21	takamiya, yoshfuji
	* kernel/linux24: sync with HUT's MIPv6 implementation
	as of 2001/12/26 based on draft-15.
	XXX: maybe broken.  userland is not included.

2002/01/21	miyazawa
	* kernel/linux24/include/linux/calc_hmac.h,
	  kernel/linux24/net/key/{Makefile,calc_hmac.c},
	  kernel/linux24/net/netsyms.c,
	remove original calc_hmac

2002/01/21	miyazawa
	* kernel/linux24/crypto/cryptoapi,crypto/digest/{digest-md5.c,
	  digest-sha1.c,gen-hmac.h},
	  kernel/linux24/net/ipv6/{ipsec6_input.c,ipsec6_utils.c},
	  kernel/linux24/include/linux/crypto.h:
	merge calc_hmac routine to cryptoapi

2002/01/16	mk
	* kernel/linux24/net/key/{pfkey_v2_msg.c,pfkey_v2_msg.h,sadb_utils.c},
	  usagi/usagi/pfkey_util/{pfkey.c,pfkeylib.c}:
	support AES(128-bit key) <see draft-ietf-ipsec-ciph-aes-cbc-03.txt>
	and also I added AES definitions in linux24/pfkeyv2.h (rev 1.5).
	NOTE: currently not yet well tested.


2002/01/15	miyazawa
	* kernel/linux24/include/net/{pfkeyv2.h,sadb.h}
	  kernel/linux24/net/key/{af_key.c,pfkey_v2_msg.h,pfkey_v2_msg.c,
	  sadb.c}, usagi/pfkey_util/{pfkey.c,pfkeylib.h,pfkeylib.c}:
	make flush message specify SATYPE and add flush Policy with 
	SADB_X_FLUSH_SP.

2002/01/12	mk
	* kernel/linux24/net/ipv6/{ipsec6_input.c, ipsec6_utils.c},
	  kernel/linux24/net/pfkey/sadb.c: 
	keep IV value in esp_algo_info {} because cryptoapi removed iv in cx{}.

2002/01/11	miyazawa
	* kernel/linux24/net/key/{pfkey_v2_msg_add.c,pfkey_v2_msg_getspi.c}
	add restriction for reserved SPI by IANA.

2002/01/11	miyazawa
	* kernel/linux24/net/key/{sa_index.c,sadb.c}
	Support SPI=any in policy. If you specify SPI=any(0xFFFFFFFF), IPsec's 
	behavior is:
	OUTBOUND:
		Policy searches a SA by the Destination Address and IPsec 
		protocol.  If there are two or more SAs matched the policy 
		condition in SADB, Policy use the first configured one
		till the SA expires.
	INBOUND:
		Policy searches a SA by the Destination Address and IPsec 
		protocol.  If there are two or more SAs matched the policy 
		condition in SADB, Policy accepts those SAs to process 
		INBOUND packets.

2002/01/10	yoshfuji
	* kernel/linux24/net/ipv6/{ip6_output,tcp_ipv6}.c: fixed typo;
	packet was not encrypted if AH had been already added.

2002/01/09      miyazawa
        * kernel/linux24/net/key/{pfkey_v2_msg_flow.c,sa_index.c,spd.c}:
	fixed prefixlen_d handling in sa_index of ipsec_sp.

2002/01/08	mk
	* kernel/linux24/crypto, kernel/linux24/drivers/block/loop.c: 
	updated cryptoapi 2.4.17.0 and loop-hvr-2.4.16.0.
