summaryrefslogtreecommitdiff
path: root/sbin/iked/config.c
AgeCommit message (Expand)Author
2012-07-02Don't close IKE SA immediately after creating a new one when rekeying.Mike Belopuhov
2012-06-22Add initial support for retransmition timeouts and response retries.Mike Belopuhov
2011-07-05fix memcpy sizeof. found by jsg. ok deraadt krw mikebTed Unangst
2011-05-09rename functions in proc.c to proc_* and move some code from imsg_util.c toReyk Floeter
2011-05-05rename iked_proc* to privsep_proc*. no functional change.Reyk Floeter
2011-04-18When the kernel wants to acquire an SA for an unknown flow, lookup aReyk Floeter
2011-01-26get rid of acquire flows completely, as they tend to pass trafficMike Belopuhov
2011-01-21Reimplement the iked(8) policy evaluation for incoming connections toReyk Floeter
2011-01-21split pfkey initialization into a privileged and unprivileged part toReyk Floeter
2011-01-12postpone processing of pfkey messages received in pfkey_reply instead ofMike Belopuhov
2010-12-22child sa rekeying revamp plus numerous bugfixes;Mike Belopuhov
2010-06-14More code for initiator mode (not finished yet)Reyk Floeter
2010-06-10add new commands: the couple/decouple commands will set loading of theReyk Floeter
2010-06-10Add another tree to lookup policy SAs by peer address.Reyk Floeter
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter