| Age | Commit message (Expand) | Author |
|---|
| 2014-12-05 | Store return value of i2d_X509_NAME in a signed integer to make | Mike Belopuhov |
| 2014-11-07 | Fixup a few problems with EAP state transition | Mike Belopuhov |
| 2014-11-07 | Repair initiator with PSK auth | Mike Belopuhov |
| 2014-07-09 | expire IPcomp SAs too; ok mikeb (some time ago) | Markus Friedl |
| 2014-05-13 | pass SA initiator not the exchange initator to sa_address(); ok mikeb@ | Markus Friedl |
| 2014-05-09 | get rid of redundant {csa,flow}_{src,dst}id pointers, so we don't need | Markus Friedl |
| 2014-05-09 | replace iked_transform pointer with xform id, since target of pointer | Markus Friedl |
| 2014-05-07 | make authentication work with X509 certificates that don't have a | Markus Friedl |
| 2014-05-07 | factor out ikev2_ike_auth() (state machine; used multiple times via callbacks) | Markus Friedl |
| 2014-05-06 | change the create-child-sa responder code, so it does not store any | Markus Friedl |
| 2014-05-06 | initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkey | Markus Friedl |
| 2014-05-06 | cleanup IKE-SA tree handling (fixes repeated-insert & double-remove) | Markus Friedl |
| 2014-05-06 | send the delete with the locally allocated SPI in ikev2_init_create_child_sa() | Markus Friedl |
| 2014-05-06 | initial support for PFS; ok reyk@ | Markus Friedl |
| 2014-05-06 | retire IKED_REQ_DELETE and fix delete parsing; ok reyk@ | Markus Friedl |
| 2014-04-29 | make sure the state machine only advances if the AUTH payload has | Markus Friedl |
| 2014-04-28 | spacing | Reyk Floeter |
| 2014-04-10 | Add validation routines to ikev2_pld.c: For each payload type overall | Reyk Floeter |
| 2014-03-12 | don't leak an ibuf for each expired SA; ok mikeb@ | Markus Friedl |
| 2014-03-12 | unbreak config-address w/o pool; ok mikeb@ | Markus Friedl |
| 2014-02-26 | don't policy_ref an activate policy (policy_ref/unref are assymetrical), | Markus Friedl |
| 2014-02-21 | support rekeying for IPCOMP; ok mikeb@ | Markus Friedl |
| 2014-02-18 | check the error from ikev2_cp_setaddr | Markus Friedl |
| 2014-02-17 | interpret 'config address net/prefix' as a pool of addresses and | Markus Friedl |
| 2014-02-17 | Fix compiler warnings in the format strings: use %zd for ssize_t and | Reyk Floeter |
| 2014-02-14 | initial support for IPComp | Markus Friedl |
| 2014-01-24 | re-lookup the policy as soon as we have the ID of the peer (destid) | Markus Friedl |
| 2014-01-24 | use a bit saner timer api | Mike Belopuhov |
| 2014-01-22 | implement DPD similar to isakmpd, but only send DPD-messages 'on-demand' | Markus Friedl |
| 2013-12-09 | distingush between sa_msgid not set and 0; otherwise we start | Markus Friedl |
| 2013-12-03 | never cast to sockaddr_storage, always cast to the abstract 'class' sockaddr | Markus Friedl |
| 2013-11-28 | mark replaced flows as 'not loaded'; this can happen if both | Markus Friedl |
| 2013-11-28 | drop duplicate requests | Markus Friedl |
| 2013-11-28 | support raw pubkey authentication w/o x509 certificates; | Markus Friedl |
| 2013-06-13 | Add support for protected-subnet config types. | Reyk Floeter |
| 2013-03-21 | remove excessive includes | Theo de Raadt |
| 2013-01-08 | Remove private CVS tag from an obsolete repository and bump copyright | Reyk Floeter |
| 2012-12-15 | Don't pass an uninitialized arg to ibuf_release(); initialize it to NULL. | Reyk Floeter |
| 2012-10-23 | Add a cast for input to inet_pton() to silence a possible but harmless | Reyk Floeter |
| 2012-10-22 | Fix NAT-T support in iked, both on the initiator and the responder | Reyk Floeter |
| 2012-09-18 | update email addresses to match reality. | Reyk Floeter |
| 2012-07-05 | when rekeying ike sa copy more info from the old one; | Mike Belopuhov |
| 2012-07-03 | Improve the key derivation function to produce correct keying material | Mike Belopuhov |
| 2012-07-02 | checking state flags make sense only when processing a response | Mike Belopuhov |
| 2012-07-02 | augment every sa_free call with a debugging log message | Mike Belopuhov |
| 2012-07-02 | Don't close IKE SA immediately after creating a new one when rekeying. | Mike Belopuhov |
| 2012-07-02 | a state machine is not worth the trouble when you've got a flag. doh! | Mike Belopuhov |
| 2012-06-29 | Add missing ESN bits | Mike Belopuhov |
| 2012-06-26 | close SA when IKE_SA_INIT or IKE_AUTH exchanges fail; | Mike Belopuhov |
| 2012-06-26 | compare exchange types as well when looking up a message; | Mike Belopuhov |
