src - OpenBSD base system

Age	Commit message (Expand)	Author
2011-05-09	rename functions in proc.c to proc_* and move some code from imsg_util.c to	Reyk Floeter
2011-05-05	Small tweak - add direct pointer to env instead of using an indirect one.	Reyk Floeter
2011-05-05	Move the proc.c-specific runtime state out of struct iked into a sub-struct.	Reyk Floeter
2011-05-05	rename iked_proc* to privsep_proc*. no functional change.	Reyk Floeter
2011-05-02	store the peer address as it was specified in the policy in the	Mike Belopuhov
2011-04-18	When the kernel wants to acquire an SA for an unknown flow, lookup a	Reyk Floeter
2011-04-15	remove unused function ikev2_flows_delete()	Reyk Floeter
2011-01-26	get rid of acquire flows completely, as they tend to pass traffic	Mike Belopuhov
2011-01-21	don't use memcmp on comparing two iked_addrs but IKED_ADDR_EQ.	Reyk Floeter
2011-01-21	- Fix traffic selector configuration that it is always "from $localnet	Reyk Floeter
2011-01-21	Reimplement the iked(8) policy evaluation for incoming connections to	Reyk Floeter
2011-01-21	split pfkey initialization into a privileged and unprivileged part to	Reyk Floeter
2011-01-17	Add initial acquire mode support and use it whenever Windows peers decide	Mike Belopuhov
2011-01-17	move mask2prefixlen functions to the util module; ok reyk	Mike Belopuhov
2011-01-12	postpone processing of pfkey messages received in pfkey_reply instead of	Mike Belopuhov
2011-01-12	decouple flow deletion from the ikev2_childsa_delete; ok reyk	Mike Belopuhov
2010-12-22	move and rename util.c:print_id() to ikev2.c:ikev2_print_id() because	Reyk Floeter
2010-12-22	split util.c into two files: imsg_util.c for ibuf/imsg stuff and util for	Reyk Floeter
2010-12-22	child sa rekeying revamp plus numerous bugfixes;	Mike Belopuhov
2010-12-01	Clarify the internal ibuf API: rename ibuf_copy() to ibuf_get() because	Reyk Floeter
2010-11-17	Allow the -D command line flag to actually define macros.	Chris Kuethe
2010-09-22	support INVALID_KE_PAYLOAD notification sent by the responder in case	Mike Belopuhov
2010-09-09	- allow esp proposals without integrity and ah proposals without	Mike Belopuhov
2010-07-01	Add support for the tap extension (ikev2 ... tap "enc1") that will	Reyk Floeter
2010-06-29	add code to lookup the RSA public keys in /etc/iked/pubkeys/ as an	Reyk Floeter
2010-06-27	When a peer requests a certificate from the local gateway, we first	Reyk Floeter
2010-06-27	Instead of modifying and fiddling with the IKE SA in the payload	Reyk Floeter
2010-06-26	revert the files that have been accidentally committed with my	Reyk Floeter
2010-06-26	mixing any (AF_UNSPEC) with AF_INET/INET6 is not an address family mismatch	Reyk Floeter
2010-06-26	Include the Id type in the generated SA tag that is passed to the	Reyk Floeter
2010-06-14	Initiator mode with certificates; needs more work but works.	Reyk Floeter
2010-06-14	Initial support for initiator mode which allows to run iked as a	Reyk Floeter
2010-06-14	NAT detection again: make it work in initiator and responder mode	Reyk Floeter
2010-06-14	restructure code a bit to move closer to initiator mode:	Reyk Floeter
2010-06-14	cleanup messages and parsed information correctly	Reyk Floeter
2010-06-14	More code for initiator mode (not finished yet)	Reyk Floeter
2010-06-11	add some infrastructure to support timers and initiator mode later.	Reyk Floeter
2010-06-10	add new commands: the couple/decouple commands will set loading of the	Reyk Floeter
2010-06-10	Add another tree to lookup policy SAs by peer address.	Reyk Floeter
2010-06-10	i don't like splitting source code in too many source files but ikev2.c	Reyk Floeter
2010-06-03	Import iked, a new implementation of the IKEv2 protocol.	Reyk Floeter