Age | Commit message (Expand) | Author |
2024-07-13 | Add RADIUS support. Authentication, accounting, and "Dynamic | YASUOKA Masahiko |
2024-02-15 | Introduce new IMSG_CTL_PROCREADY which is used to signal that all pipes | Tobias Heider |
2024-02-15 | Remove unused control_socks queue. | Tobias Heider |
2024-02-13 | Control startup of PROC_CERT and PROC_IKEV2. | Tobias Heider |
2024-01-15 | Include cert_partial_chain in iked_static instead of sending a separate | Tobias Heider |
2023-06-28 | Don't call daemon() after proc_init(), otherwise the child processes | Gerhard Roth |
2023-06-25 | remove ca_sslinit() | Omar Polo |
2023-03-05 | Fix clean process shutdown by storing env globally like vmd and httpd do | Tobias Heider |
2023-03-04 | Sync proc.c from vmd(8) to enabled fork + exec for all processes. This gives | Tobias Heider |
2021-12-01 | whitespace cleanup during review read | Theo de Raadt |
2021-11-29 | add -V to usage(), and list it before -v in both SYNOPSIS and the | Jason McIntyre |
2021-11-29 | Add command line option to show the version | Tobias Heider |
2021-11-25 | Silence unitialized variable warnings. | Tobias Heider |
2021-09-01 | Add client side support for DNS configuration. Use RTM_PROPOSAL_STATIC | Tobias Heider |
2021-05-13 | Refactor iked process shutdown and cleanup. Remember configured | tobhe |
2021-03-03 | Free sc_vroute on shutdown. | tobhe |
2021-02-22 | Don't pass 'id' as argument to make function signature match similar | tobhe |
2021-02-13 | Add dynamic address configuration for roadwarrior clients. | tobhe |
2021-02-08 | Clean up kernel IPsec flows and security associations on shutdown. | tobhe |
2020-12-17 | Use strtonum() instead of atoi() to parse port option. | tobhe |
2020-12-17 | Sort command line options. | tobhe |
2020-11-20 | add -s to synopsis and usage; -S before -s in options list; | Jason McIntyre |
2020-11-20 | Add -s socket option to specify control socket. This can be useful if | tobhe |
2020-09-23 | Add new 'set cert_partial_chain' config option to allow verification of | tobhe |
2020-08-24 | Reduce the amount of boilerplate code and imsgs for config options by | tobhe |
2020-08-23 | Add a new configuration option to limit the number of connections for | tobhe |
2020-08-23 | Rename natt_mode to sc_nattmode for consistency. | tobhe |
2020-08-21 | Use trusted CA from /etc/iked/ca/ as OCSP issuer to get rid of | tobhe |
2020-04-09 | Simplify socket creation logic. Normally iked needs two sockets, one | tobhe |
2020-04-03 | Port set in 'sin_port' should be htons() not ntohs(). | tobhe |
2020-01-16 | Add '-p' command line option which allows to configure | tobhe |
2020-01-15 | s/deprecated/ignored/ in the warning message if -6 is used; the option | Stuart Henderson |
2020-01-14 | Remove IPsec flow blocking unencrypted IPv6 traffic which was | tobhe |
2019-11-30 | The message sent in config_setmode starts the handshake in the ikev2 process | tobhe |
2019-05-11 | Add support for IKEv2 Message Fragmentation as defined in RFC 7383. | Patrick Wildt |
2017-11-27 | Implement MOBIKE (RFC 4555) support in iked(8), with us acting as | Patrick Wildt |
2017-11-08 | Do not accept superfluous arguments. | Patrick Wildt |
2017-03-23 | set ps_noaction to not fork uneeded children when checking config with -n | Jonathan Gray |
2017-01-09 | Stop accessing verbose and debug variables from log.c directly. | Reyk Floeter |
2017-01-03 | Fix pledge of the ca process by calling the right function on startup. | Reyk Floeter |
2016-09-04 | Forward IMSG_CTL_VERBOSE via the parent; this fixes a crash when doing | Reyk Floeter |
2015-12-07 | Sync proc.c, use shorter proc_compose[v]() | Reyk Floeter |
2015-11-22 | Update log.c: change fatal() and fatalx() into variadic functions, | Reyk Floeter |
2015-10-22 | iked hereby pledges that it will run with restricted system | Reyk Floeter |
2015-10-19 | Remove the ikev1 stub - Since I started iked, it has an empty privsep | Reyk Floeter |
2015-10-15 | Remove some unnecessary NULL-checks before free(). Change two bzero() | mmcc |
2015-08-21 | Switch iked to C99-style fixed-width integer types. | Reyk Floeter |
2015-06-03 | Do not assume that asprintf() clears the pointer on failure, which | Todd C. Miller |
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
2014-08-18 | Sync proc.c with httpd. httpd needs SIGUSR1 but iked will ignore it | Reyk Floeter |