Age | Commit message (Expand) | Author |
2019-08-24 | Clarify "protected-subnet" option. | tobhe |
2019-08-16 | Add explanation for the [IKE/ESP only] column of the transform table. | tobhe |
2019-05-11 | Add support for IKEv2 Message Fragmentation as defined in RFC 7383. | Patrick Wildt |
2019-04-02 | When curve25519 was added to iked, it was based on the internet-draft and | Stuart Henderson |
2018-01-31 | Add support for specifying multiple transforms within a single proposal. | Patrick Wildt |
2018-01-24 | Implement support for specifying multiple proposals. This means we can | Patrick Wildt |
2017-11-27 | Implement MOBIKE (RFC 4555) support in iked(8), with us acting as | Patrick Wildt |
2017-06-01 | Expand $eapid in iked tags, allowing PF rules to be written based on EAP | Stuart Henderson |
2017-03-27 | correct verb pattern; | Jason McIntyre |
2017-03-27 | Add support for RFC4754 (ECDSA) and RFC7427 authentication. | Reyk Floeter |
2017-03-13 | Clarify iked.conf(5) manpage in regards to IP compression. | Patrick Wildt |
2017-01-04 | Remove modular exponential groups specified in RFC5114 | Mike Belopuhov |
2016-11-28 | ikelifetime time spec is the same the one for lifetime | Mike Belopuhov |
2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
2015-11-04 | Support Chacha20-Poly1305 for Child SAs; ok reyk | Mike Belopuhov |
2015-11-01 | replace "can not" with "cannot"; | Jason McIntyre |
2015-10-31 | pasto | Christian Weisgerber |
2015-10-19 | break long lines in examples; ok jmc@ | Christian Weisgerber |
2015-07-14 | clarification from trondd; | Jason McIntyre |
2015-02-28 | Reduce usage of predefined strings in manpages. | Anthony J. Bentley |
2015-01-15 | tell the truth about DES. | Igor Sobrado |
2015-01-02 | PFS stands for Perfect Forward Secrecy. | Igor Sobrado |
2014-08-27 | Add support for Curve25519 using the public domain code that is found | Reyk Floeter |
2014-08-25 | Add support for DH groups 27-30 using the Brainpool curves which have | Reyk Floeter |
2014-08-05 | Fix an example, nat-to requires to specify the "out" direction in pf rules. | Reyk Floeter |
2014-05-06 | zap stray word; ok markus | Jason McIntyre |
2014-05-06 | initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkey | Markus Friedl |
2014-04-28 | macro fixes for previous; ok reyk | Jason McIntyre |
2014-04-28 | bump copyright | Reyk Floeter |
2014-04-28 | Add missing documentation for ipcomp(4) support and the configuration | Reyk Floeter |
2014-02-17 | basic OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"' | Markus Friedl |
2013-11-01 | altq -> new queue in examples | Henning Brauer |
2013-07-16 | Add missing .Mt macros for AUTHORS email addresses. | Ingo Schwarze |
2013-05-22 | Move the gmac/null ciphers to a different table block, clearly labelled as | Stuart Henderson |
2013-03-05 | cross referencing the manual page is better. | Igor Sobrado |
2013-03-05 | fix program name used in AUTHORS section. | Igor Sobrado |
2013-01-08 | Remove private CVS tag from an obsolete repository and bump copyright | Reyk Floeter |
2012-09-18 | update email addresses to match reality. | Reyk Floeter |
2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | Christian Weisgerber |
2012-05-23 | fixup from/to specification | Mike Belopuhov |
2012-04-24 | take a stab at documenting when arguments need quoted, and valid macro | Jason McIntyre |
2012-04-18 | undo an error introduced by myself in previous; | Jason McIntyre |
2011-09-03 | make -column lists pretty again; | Jason McIntyre |
2011-08-19 | as with other list types, column lists generally do not need a Pp/-compact | Jason McIntyre |
2011-01-21 | tweak previous; | Jason McIntyre |
2011-01-21 | Reimplement the iked(8) policy evaluation for incoming connections to | Reyk Floeter |
2010-12-22 | Tweak the grammar a little bit by requiring a "bytes" keyword before the | Reyk Floeter |
2010-12-22 | child sa rekeying revamp plus numerous bugfixes; | Mike Belopuhov |
2010-09-23 | support for aes-gcm | Mike Belopuhov |
2010-07-01 | Add support for the tap extension (ikev2 ... tap "enc1") that will | Reyk Floeter |