summaryrefslogtreecommitdiff
path: root/sbin/iked/iked.conf.5
AgeCommit message (Expand)Author
2019-08-24Clarify "protected-subnet" option.tobhe
2019-08-16Add explanation for the [IKE/ESP only] column of the transform table.tobhe
2019-05-11Add support for IKEv2 Message Fragmentation as defined in RFC 7383.Patrick Wildt
2019-04-02When curve25519 was added to iked, it was based on the internet-draft andStuart Henderson
2018-01-31Add support for specifying multiple transforms within a single proposal.Patrick Wildt
2018-01-24Implement support for specifying multiple proposals. This means we canPatrick Wildt
2017-11-27Implement MOBIKE (RFC 4555) support in iked(8), with us acting asPatrick Wildt
2017-06-01Expand $eapid in iked tags, allowing PF rules to be written based on EAPStuart Henderson
2017-03-27correct verb pattern;Jason McIntyre
2017-03-27Add support for RFC4754 (ECDSA) and RFC7427 authentication.Reyk Floeter
2017-03-13Clarify iked.conf(5) manpage in regards to IP compression.Patrick Wildt
2017-01-04Remove modular exponential groups specified in RFC5114Mike Belopuhov
2016-11-28ikelifetime time spec is the same the one for lifetimeMike Belopuhov
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-11-04Support Chacha20-Poly1305 for Child SAs; ok reykMike Belopuhov
2015-11-01replace "can not" with "cannot";Jason McIntyre
2015-10-31pastoChristian Weisgerber
2015-10-19break long lines in examples; ok jmc@Christian Weisgerber
2015-07-14clarification from trondd;Jason McIntyre
2015-02-28Reduce usage of predefined strings in manpages.Anthony J. Bentley
2015-01-15tell the truth about DES.Igor Sobrado
2015-01-02PFS stands for Perfect Forward Secrecy.Igor Sobrado
2014-08-27Add support for Curve25519 using the public domain code that is foundReyk Floeter
2014-08-25Add support for DH groups 27-30 using the Brainpool curves which haveReyk Floeter
2014-08-05Fix an example, nat-to requires to specify the "out" direction in pf rules.Reyk Floeter
2014-05-06zap stray word; ok markusJason McIntyre
2014-05-06initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkeyMarkus Friedl
2014-04-28macro fixes for previous; ok reykJason McIntyre
2014-04-28bump copyrightReyk Floeter
2014-04-28Add missing documentation for ipcomp(4) support and the configurationReyk Floeter
2014-02-17basic OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"'Markus Friedl
2013-11-01altq -> new queue in examplesHenning Brauer
2013-07-16Add missing .Mt macros for AUTHORS email addresses.Ingo Schwarze
2013-05-22Move the gmac/null ciphers to a different table block, clearly labelled asStuart Henderson
2013-03-05cross referencing the manual page is better.Igor Sobrado
2013-03-05fix program name used in AUTHORS section.Igor Sobrado
2013-01-08Remove private CVS tag from an obsolete repository and bump copyrightReyk Floeter
2012-09-18update email addresses to match reality.Reyk Floeter
2012-06-30enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPChristian Weisgerber
2012-05-23fixup from/to specificationMike Belopuhov
2012-04-24take a stab at documenting when arguments need quoted, and valid macroJason McIntyre
2012-04-18undo an error introduced by myself in previous;Jason McIntyre
2011-09-03make -column lists pretty again;Jason McIntyre
2011-08-19as with other list types, column lists generally do not need a Pp/-compactJason McIntyre
2011-01-21tweak previous;Jason McIntyre
2011-01-21Reimplement the iked(8) policy evaluation for incoming connections toReyk Floeter
2010-12-22Tweak the grammar a little bit by requiring a "bytes" keyword before theReyk Floeter
2010-12-22child sa rekeying revamp plus numerous bugfixes;Mike Belopuhov
2010-09-23support for aes-gcmMike Belopuhov
2010-07-01Add support for the tap extension (ikev2 ... tap "enc1") that willReyk Floeter