src - OpenBSD base system

Age	Commit message (Expand)	Author
2021-09-07	Fix leak of msg_cert.id_buf. ikev2_msg_cleanup() frees id_buf if we	Tobias Heider
2021-09-01	Add client side support for DNS configuration. Use RTM_PROPOSAL_STATIC	Tobias Heider
2021-06-29	Send AUTHENTICATION_FAILED in case of unexpected auth method or auth	tobhe
2021-06-17	Skip flows in ikev2_cp_addr() if they don't contain a dynamic (0.0.0.0)	tobhe
2021-06-11	Revert previous change in ikev2_cp_fixaddr().	tobhe
2021-05-31	Don't fail hard in ikev2_cp_fixaddr() if no address pool is found.	tobhe
2021-05-31	Prevent address underflow with /32 config address prefix.	tobhe
2021-05-13	Refactor iked process shutdown and cleanup. Remember configured	tobhe
2021-03-23	Don't send DELETE notify if IKE SA is replaced because of	tobhe
2021-03-15	Ignore msg_ke in CREATE_CHILD_SA if DH negotiation results in group	tobhe
2021-03-14	Log errors with log level info and SPI.	tobhe
2021-03-09	Also log transforms on IKE SA rekey.	tobhe
2021-03-07	Log ESN for child SAs if enabled.	tobhe
2021-03-06	whitespace	tobhe
2021-03-05	Print PFS group for rekeyed Child SAs.	tobhe
2021-03-05	Log transforms of established IKE and Child SAs.	tobhe
2021-03-04	Derive config netmask from address pool if not explicitly configured.	tobhe
2021-02-20	Fail on invalid address family.	tobhe
2021-02-18	Save one allocation by passing msg_nonce ownership instead of using	tobhe
2021-02-18	Pass ownership instead of duplicating ibuf msg_ke.	tobhe
2021-02-13	Add dynamic address configuration for roadwarrior clients.	tobhe
2021-02-11	Explicitly unset IKED_REQ_CERTVALID before sending cert to ca process.	tobhe
2021-02-10	Delay deletion of IKE SAs on rekey when stickyaddress is enabled to make	tobhe
2021-02-09	Add optional 'group none' transform for child SAs and fix handling of	tobhe
2021-02-04	Rename 'struct group' to 'struct dh_group' for more clarity and	tobhe
2021-02-04	Upgrade to OpenSSL 1.1 compatible crypto API. Add additional	tobhe
2021-02-01	Take flows into consideration for policy lookup as initiator.	tobhe
2021-01-31	Ignore addresses that are not 0/32 (dynamic) in ikev2_cp_fixaddr()	tobhe
2021-01-31	Don't leak flows if ikev2_cp_fixflow() fails.	tobhe
2021-01-23	Fix typos.	tobhe
2021-01-21	Handle NO_PROPOSAL_CHOSEN for CREATE_CHILD_SA.	tobhe
2021-01-21	Add support for INVALID_KE_PAYLOAD in CREATE_CHILD_SA	tobhe
2021-01-20	Make sure to enforce matching dstid as initiator. Use policy lookup	tobhe
2021-01-18	Sync SA configuration payload to new SA after IKE SA rekeying.	tobhe
2020-12-27	Fix "any" and "dynamic" keywords for flows and add proper IPv6 support.	tobhe
2020-12-21	Use policy_test() to reassign existing SAs to updated policies after	tobhe
2020-11-30	We need to rekey every child SA (even if acquired): Otherwise we can	tobhe
2020-11-29	Add 'set stickyaddress' option. If this option is enabled, iked will try	tobhe
2020-11-28	Add support for multiple address pools. The parser already allows	tobhe
2020-11-27	Remove redundant state change. ikev2_ikesa_delete() sets the correct state.	tobhe
2020-11-25	Fix proposal error handling. If a proposal contains an unknown transform	tobhe
2020-11-24	Fix duplicate sa->sa_cp assignment.	tobhe
2020-11-21	Clean up NATT hack. Pass 'frompeer' as parameter instead of manipulating	tobhe
2020-11-17	Remove redundant indirection via msg_parent. This is only needed in	tobhe
2020-11-16	Reenable ikev2_init_auth() return value check. Make sure sa_stateok()	tobhe
2020-11-16	Backout ikev2_init_auth() return check to fix regression with	tobhe
2020-11-14	Make sure not to replace 0.0.0.0 with dynamic address if it is a a network	tobhe
2020-11-13	addr_net is already checked in ikev2_cp_setaddr() before sessing	tobhe
2020-11-12	Close SA if ikev2_init_auth() fails.	tobhe
2020-11-12	Fail if ikev2_init_ike_auth() is entered with invalid state.	tobhe