index
:
src
cvs/HEAD
kms/intel
kms/radeon
master
OpenBSD base system
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
sbin
/
iked
/
iked.c
Age
Commit message (
Expand
)
Author
2023-06-28
Don't call daemon() after proc_init(), otherwise the child processes
Gerhard Roth
2023-06-25
remove ca_sslinit()
Omar Polo
2023-03-05
Fix clean process shutdown by storing env globally like vmd and httpd do
Tobias Heider
2023-03-04
Sync proc.c from vmd(8) to enabled fork + exec for all processes. This gives
Tobias Heider
2021-12-01
whitespace cleanup during review read
Theo de Raadt
2021-11-29
add -V to usage(), and list it before -v in both SYNOPSIS and the
Jason McIntyre
2021-11-29
Add command line option to show the version
Tobias Heider
2021-11-25
Silence unitialized variable warnings.
Tobias Heider
2021-09-01
Add client side support for DNS configuration. Use RTM_PROPOSAL_STATIC
Tobias Heider
2021-05-13
Refactor iked process shutdown and cleanup. Remember configured
tobhe
2021-03-03
Free sc_vroute on shutdown.
tobhe
2021-02-22
Don't pass 'id' as argument to make function signature match similar
tobhe
2021-02-13
Add dynamic address configuration for roadwarrior clients.
tobhe
2021-02-08
Clean up kernel IPsec flows and security associations on shutdown.
tobhe
2020-12-17
Use strtonum() instead of atoi() to parse port option.
tobhe
2020-12-17
Sort command line options.
tobhe
2020-11-20
add -s to synopsis and usage; -S before -s in options list;
Jason McIntyre
2020-11-20
Add -s socket option to specify control socket. This can be useful if
tobhe
2020-09-23
Add new 'set cert_partial_chain' config option to allow verification of
tobhe
2020-08-24
Reduce the amount of boilerplate code and imsgs for config options by
tobhe
2020-08-23
Add a new configuration option to limit the number of connections for
tobhe
2020-08-23
Rename natt_mode to sc_nattmode for consistency.
tobhe
2020-08-21
Use trusted CA from /etc/iked/ca/ as OCSP issuer to get rid of
tobhe
2020-04-09
Simplify socket creation logic. Normally iked needs two sockets, one
tobhe
2020-04-03
Port set in 'sin_port' should be htons() not ntohs().
tobhe
2020-01-16
Add '-p' command line option which allows to configure
tobhe
2020-01-15
s/deprecated/ignored/ in the warning message if -6 is used; the option
Stuart Henderson
2020-01-14
Remove IPsec flow blocking unencrypted IPv6 traffic which was
tobhe
2019-11-30
The message sent in config_setmode starts the handshake in the ikev2 process
tobhe
2019-05-11
Add support for IKEv2 Message Fragmentation as defined in RFC 7383.
Patrick Wildt
2017-11-27
Implement MOBIKE (RFC 4555) support in iked(8), with us acting as
Patrick Wildt
2017-11-08
Do not accept superfluous arguments.
Patrick Wildt
2017-03-23
set ps_noaction to not fork uneeded children when checking config with -n
Jonathan Gray
2017-01-09
Stop accessing verbose and debug variables from log.c directly.
Reyk Floeter
2017-01-03
Fix pledge of the ca process by calling the right function on startup.
Reyk Floeter
2016-09-04
Forward IMSG_CTL_VERBOSE via the parent; this fixes a crash when doing
Reyk Floeter
2015-12-07
Sync proc.c, use shorter proc_compose[v]()
Reyk Floeter
2015-11-22
Update log.c: change fatal() and fatalx() into variadic functions,
Reyk Floeter
2015-10-22
iked hereby pledges that it will run with restricted system
Reyk Floeter
2015-10-19
Remove the ikev1 stub - Since I started iked, it has an empty privsep
Reyk Floeter
2015-10-15
Remove some unnecessary NULL-checks before free(). Change two bzero()
mmcc
2015-08-21
Switch iked to C99-style fixed-width integer types.
Reyk Floeter
2015-06-03
Do not assume that asprintf() clears the pointer on failure, which
Todd C. Miller
2015-01-16
Replace <sys/param.h> with <limits.h> and other less dirty headers where
Theo de Raadt
2014-08-18
Sync proc.c with httpd. httpd needs SIGUSR1 but iked will ignore it
Reyk Floeter
2014-05-08
match iked proc.c infrastructure with proc.c
Bret Lambert
2014-04-22
Update iked to use the same proc.c that relayd uses.
Reyk Floeter
2014-02-17
basic OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"'
Markus Friedl
2013-10-24
no need for netinet/ip_var.h (and friends)
Theo de Raadt
2013-03-21
remove excessive includes
Theo de Raadt
[next]