summaryrefslogtreecommitdiff
path: root/sbin/iked/ikev2.h
AgeCommit message (Expand)Author
2023-06-28Add support to verify X509 chain from CERT payloads.Tobias Heider
2021-05-28Add experimental post-quantum hybrid key exchange methodtobhe
2020-05-26Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.tobhe
2020-04-28Remove support for insecure EC2N groups. Clarify which Diffie-Hellmantobhe
2019-12-03Correctly represent flows as traffic selectors as described in RFC 7296. Thistobhe
2019-05-11Add support for IKEv2 Message Fragmentation as defined in RFC 7383.Patrick Wildt
2019-04-02When curve25519 was added to iked, it was based on the internet-draft andStuart Henderson
2019-02-27update RFC references, from tobias_heider at genua.de, ok claudio@Stuart Henderson
2017-12-03If we wanted to send out more proposals than just one, we need to set aPatrick Wildt
2017-03-27Add support for RFC4754 (ECDSA) and RFC7427 authentication.Reyk Floeter
2017-01-20New RFC7383 defineMike Belopuhov
2017-01-04Remove modular exponential groups specified in RFC5114Mike Belopuhov
2015-10-31RFC4754 specifies ECDSA-521 (sic), not -512. ok reyk@Christian Weisgerber
2015-10-02Curve25519 is now specified in draft-ietf-ipsecme-safecurves-00 (alongReyk Floeter
2015-10-02RFC7634 specifies ChaCha20-Poly1305 for IKEv2 and IPsec and IANAReyk Floeter
2015-08-21Switch iked to C99-style fixed-width integer types.Reyk Floeter
2015-06-11Use "compliant" header guards by avoiding the reserved '_' namespace.Reyk Floeter
2015-03-26initial support for RFC 7427 signatures, so we are no longerMarkus Friedl
2014-11-07Repair initiator with PSK authMike Belopuhov
2014-08-27Add support for Curve25519 using the public domain code that is foundReyk Floeter
2014-05-06initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkeyMarkus Friedl
2014-04-29make sure the state machine only advances if the AUTH payload hasMarkus Friedl
2014-02-14initial support for IPCompMarkus Friedl
2013-03-30Sync with latest IKEv2 Parameters from IANA. No functional change.Reyk Floeter
2013-01-08Remove private CVS tag from an obsolete repository and bump copyrightReyk Floeter
2012-10-25Move the arrays of default IKE and ESP transforms into parse.y insteadReyk Floeter
2012-09-18update email addresses to match reality.Reyk Floeter
2012-06-29Add missing ESN bitsMike Belopuhov
2012-05-07Sync up several defines with RFC 5996. IANA has changed the existingMike Belopuhov
2010-07-03Better non-debug logging messages when a session is established/closed.Reyk Floeter
2010-06-26Include the Id type in the generated SA tag that is passed to theReyk Floeter
2010-06-23rename the ec groups to either ec2n or ecp (eg. ec155 -> ec2n155 orReyk Floeter
2010-06-14add define for saproto 0Reyk Floeter
2010-06-10i don't like splitting source code in too many source files but ikev2.cReyk Floeter
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter