summaryrefslogtreecommitdiff
path: root/sbin/iked/ikev2_msg.c
AgeCommit message (Expand)Author
2021-09-07Fix leak of m if message initialization fails.Tobias Heider
2021-09-02styleTobias Heider
2021-09-01Add client side support for DNS configuration. Use RTM_PROPOSAL_STATICTobias Heider
2020-10-29Add initial support to request IP addresses as IKEv2 initiator.tobhe
2020-10-09More unused headers.tobhe
2020-10-09Remove unused "wait.h" includes.tobhe
2020-10-06Always allocate hash_keylength() for buffers passed to hash_final() totobhe
2020-10-03React to DELETE notifications only in INFORMATIONAL messagestobhe
2020-09-26Cleanup msg_eap in ikev2_msg_cleanup().tobhe
2020-08-15Remove dead assignments.tobhe
2020-08-11Prioritize incoming certificate requests by the order of CERTEQ payloadstobhe
2020-07-08Always try to retransmit on sendtofrom() errors to ensure the SAtobhe
2020-05-26Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.tobhe
2020-05-14Stricter return value checking for EVP_Cipher* calls.tobhe
2020-04-24Log INFORMATIONAL messages with LOG_DEBUG. They are rarely useful fortobhe
2020-04-17Log retransmits of sent requests and responses.tobhe
2020-03-10Delete dead code in ikev2_msg_valid_ike_sa().tobhe
2020-03-10Make sure 'e' is NULL initialized to prevent nullptr dereference intobhe
2020-01-22delete wasteful ;;Theo de Raadt
2020-01-16Add '-p' command line option which allows to configuretobhe
2019-11-28Move Notify and Certreq payload handlers after the parser. Modify SA statetobhe
2019-11-15Fix error handling in ikev2_msg_send.tobhe
2019-11-13Log reason whenever a child SA is freed. This makes it easier totobhe
2019-11-11Cleanup message retransmission handling with new helper functions.tobhe
2019-08-12Prepend SPI to send and recv log messages to see which line belongs totobhe
2019-05-11Add support for IKEv2 Message Fragmentation as defined in RFC 7383.Patrick Wildt
2019-05-10Enforce messages after IKE_SA_INIT exchange to contain onlyPatrick Wildt
2017-11-27Implement MOBIKE (RFC 4555) support in iked(8), with us acting asPatrick Wildt
2017-04-26cope with IP address changes. before, we were trying to resend the msgHenning Brauer
2017-03-27Add support to reflect the responder IKEv2 COOKIE.Reyk Floeter
2017-03-27Add support for RFC4754 (ECDSA) and RFC7427 authentication.Reyk Floeter
2017-03-13NAT-T improvementsReyk Floeter
2017-01-20Reset various pointers in ikev2_msg_cleanupMike Belopuhov
2017-01-20Closed SAs should never be treated as validMike Belopuhov
2016-09-04Now that we have IP_SENDSRCADDR, add sendtofrom().Vincent Gross
2015-10-19Remove the ikev1 stub - Since I started iked, it has an empty privsepReyk Floeter
2015-10-15Remove some unnecessary NULL-checks before free(). Change two bzero()mmcc
2015-08-21Switch iked to C99-style fixed-width integer types.Reyk Floeter
2015-03-26initial support for RFC 7427 signatures, so we are no longerMarkus Friedl
2015-02-15convert bcmp to memcmpTed Unangst
2015-02-06unneeded getopt.hTheo de Raadt
2015-01-19Remove unnecessary <netinet/ip_ipsp.h> includesMike Belopuhov
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2014-11-07Repair initiator with PSK authMike Belopuhov
2014-08-25Delete secret or secret-derived data with explicit_bzero.Doug Hogan
2014-05-07print msgid for debugging; ok reyk & mikebMarkus Friedl
2014-05-06initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkeyMarkus Friedl
2014-05-05the caller of ikev2_msg_retransmit_response already frees the sa; ok mikebMarkus Friedl
2014-04-29make sure the state machine only advances if the AUTH payload hasMarkus Friedl
2014-04-22Update iked to use the same proc.c that relayd uses.Reyk Floeter