src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-09-16	Move all the EAP logic from a single branch in the message parsing code to	tobhe
2020-09-06	Drop redundant else for readability.	tobhe
2020-09-05	Use peer from policy, not from the acquire message.	tobhe
2020-09-04	INFORMATIONAL and CREATE_CHILD_SA exchanges cannot be initiated at the	tobhe
2020-08-28	Rename ikev2_*_sa() functions to make clear they handle Child SAs.	tobhe
2020-08-27	Make sure to save certificate in the CERTINVALID case to fix	tobhe
2020-08-26	Allow disabling DPD liveness checks by setting dpd_check_interval to 0.	tobhe
2020-08-25	Add dpd_check_interval configuration option. If for any IKE SA no IPsec	tobhe
2020-08-24	Reduce the amount of boilerplate code and imsgs for config options by	tobhe
2020-08-23	Add a new configuration option to limit the number of connections for	tobhe
2020-08-23	Rename natt_mode to sc_nattmode for consistency.	tobhe
2020-08-22	Prevent concurrent CREATE_CHILD_SA and INFORMATIONAL exchanges.	tobhe
2020-08-16	Clean up unused parameters.	tobhe
2020-08-15	Remove dead assignments.	tobhe
2020-08-14	Delete unused variable 'policy'.	tobhe
2020-08-14	Print local 'sa' variable instead of 'msg->msg_sa'.	tobhe
2020-08-14	Delete unused variable 'certid'.	tobhe
2020-08-12	style(9).	tobhe
2020-08-11	Prioritize incoming certificate requests by the order of CERTEQ payloads	tobhe
2020-07-21	Handle TEMPORARY_FAILURE notification on IKESA rekeying.	tobhe
2020-07-16	Remove unused assignment.	tobhe
2020-07-16	Make sure to update policy dependant SA fields after policy_lookup().	tobhe
2020-07-15	Make CERT and CERTREQ payloads optional for public key authentication.	tobhe
2020-07-14	Properly clean up and dereference 'old' policy after failed lookup.	tobhe
2020-06-15	Log errors with log_info and SPI prepended.	tobhe
2020-06-09	Move AUTH_REQUEST SA state change from parser to IKE_AUTH exchange handler.	tobhe
2020-06-03	Pass sockaddr instead of sockaddr_storage to sa_address.	tobhe
2020-06-02	Don't leak authmsg.	tobhe
2020-05-30	Indentation style(9).	tobhe
2020-05-28	Move duplicate SA negotiation code to ikev2_sa_negotiate_common().	tobhe
2020-05-26	Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.	tobhe
2020-05-11	Fix policy lookup edge case for simultaneous transport and tunnel mode SAs.	tobhe
2020-05-09	Log error notifications other than NO_PROPOSAL_CHOSEN	tobhe
2020-05-02	Use gettimeofday() instead of CLOCK_MONOTONIC in gettime(). The return value	tobhe
2020-05-01	When initiating IKE SA rekeying, make sure to send a key from a mutual	tobhe
2020-04-26	Fix leak of temporary ID ibufs on IKE SA rekey.	tobhe
2020-04-24	Add some useful log messages for the IKE handshake.	tobhe
2020-04-24	Log INFORMATIONAL messages with LOG_DEBUG. They are rarely useful for	tobhe
2020-04-23	Add support for switching rdomain on IPsec encryption/decryption.	tobhe
2020-04-22	Log authentication verification failure with "info" priority.	tobhe
2020-04-15	Remove redundant 'sa == NULL' check.	tobhe
2020-04-13	Try to send a DELETE message if the SA is reset with 'ikectl reset id'.	tobhe
2020-04-11	If we haven't received any IKE message from our partner for some	tobhe
2020-04-09	Simplify socket creation logic. Normally iked needs two sockets, one	tobhe
2020-04-08	Prevent multiple ibuf leaks. Clean up on proccess shutdown.	tobhe
2020-04-05	Fix size checks in ikev2_getimsgdata().	tobhe
2020-04-04	It makes no sense to fall back to original policy if the relookup with the	tobhe
2020-04-02	Store USE_TRANSPORTMODE in iked_message until the full message was parsed	tobhe
2020-04-01	Properly handle multiple CERTREQ payloads in CA process. Only for the	tobhe
2020-03-31	Log summary of certificates in cert store when iked fails to find a	tobhe