src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-08-26	Allow disabling DPD liveness checks by setting dpd_check_interval to 0.	tobhe
2020-08-25	Add dpd_check_interval configuration option. If for any IKE SA no IPsec	tobhe
2020-08-24	Reduce the amount of boilerplate code and imsgs for config options by	tobhe
2020-08-23	Add a new configuration option to limit the number of connections for	tobhe
2020-08-23	Rename natt_mode to sc_nattmode for consistency.	tobhe
2020-08-21	Use trusted CA from /etc/iked/ca/ as OCSP issuer to get rid of	tobhe
2020-08-18	Add optional time-stamp validaten for ocsp. The new optional 'tolerate'	tobhe
2020-08-16	Clean up unused parameters.	tobhe
2020-08-11	Prioritize incoming certificate requests by the order of CERTEQ payloads	tobhe
2020-07-21	Handle TEMPORARY_FAILURE notification on IKESA rekeying.	tobhe
2020-07-15	Make CERT and CERTREQ payloads optional for public key authentication.	tobhe
2020-06-03	Pass sockaddr instead of sockaddr_storage to sa_address.	tobhe
2020-05-26	Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.	tobhe
2020-05-14	Stricter return value checking for EVP_Cipher* calls.	tobhe
2020-05-13	Remove dead 'iked_flow' member 'flow_type'.	tobhe
2020-05-08	Remove unneccessary X509_NAME_oneline wrapper. Passing NULL as buf	tobhe
2020-04-23	Add support for switching rdomain on IPsec encryption/decryption.	tobhe
2020-04-20	Remove unused 'dsa_cert' variable.	tobhe
2020-04-13	Try to send a DELETE message if the SA is reset with 'ikectl reset id'.	tobhe
2020-04-11	If we haven't received any IKE message from our partner for some	tobhe
2020-04-10	Only make the type part of the idstring lowercase when looking for certs in	tobhe
2020-04-09	Simplify socket creation logic. Normally iked needs two sockets, one	tobhe
2020-04-08	Prevent multiple ibuf leaks. Clean up on proccess shutdown.	tobhe
2020-04-02	Store USE_TRANSPORTMODE in iked_message until the full message was parsed	tobhe
2020-04-01	Properly handle multiple CERTREQ payloads in CA process. Only for the	tobhe
2020-03-31	Log summary of certificates in cert store when iked fails to find a	tobhe
2020-03-24	Add ikev2_print_static_id() to print static IDs in log_debug() output.	tobhe
2020-03-10	Relookup policy based on received cryptographic parameter proposal.	tobhe
2020-03-01	When the proposals are first matched the responder does	tobhe
2020-02-21	Add transport mode for child SAs. This is useful for GRE over IPsec and	tobhe
2020-02-13	Constify "buf" argument in print_hex and print_hexval.	tobhe
2020-01-16	Add '-p' command line option which allows to configure	tobhe
2020-01-14	Remove IPsec flow blocking unencrypted IPv6 traffic which was	tobhe
2020-01-07	Link ESP-SA and IPcomp-SA using GRPSPIS instead of using a self-built	tobhe
2019-12-10	We can receive a delete and free an SA that is referenced in sa_nextr.	tobhe
2019-12-03	Correctly represent flows as traffic selectors as described in RFC 7296. This	tobhe
2019-11-30	Log loaded SPIs and flows.	tobhe
2019-11-28	Move Notify and Certreq payload handlers after the parser. Modify SA state	tobhe
2019-11-13	Log reason whenever a child SA is freed. This makes it easier to	tobhe
2019-11-11	Cleanup message retransmission handling with new helper functions.	tobhe
2019-08-14	Fix NAT traversal detection bug when "local" option is not explicitly	tobhe
2019-08-12	Prepend SPI to send and recv log messages to see which line belongs to	tobhe
2019-05-11	Add support for IKEv2 Message Fragmentation as defined in RFC 7383.	Patrick Wildt
2019-05-10	Enforce messages after IKE_SA_INIT exchange to contain only	Patrick Wildt
2018-08-06	Remove cpath pledge(2) promise. We decided that not deleting the unix control	Ricardo Mestre
2018-03-16	Consistently spell "IPsec" in comments and debug outputs.	Martin Pieuchot
2017-11-30	Add support for rejecting IKE SA messages. This means that we can reply	Patrick Wildt
2017-11-27	Implement MOBIKE (RFC 4555) support in iked(8), with us acting as	Patrick Wildt
2017-04-26	cope with IP address changes. before, we were trying to resend the msg	Henning Brauer
2017-04-13	Add a NAT-T keepalive timer in case we are behind a NAT gateway.	Patrick Wildt