src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-08-15	Remove dead assignments.	tobhe
2020-08-11	Prioritize incoming certificate requests by the order of CERTEQ payloads	tobhe
2020-07-08	Always try to retransmit on sendtofrom() errors to ensure the SA	tobhe
2020-05-26	Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.	tobhe
2020-05-14	Stricter return value checking for EVP_Cipher* calls.	tobhe
2020-04-24	Log INFORMATIONAL messages with LOG_DEBUG. They are rarely useful for	tobhe
2020-04-17	Log retransmits of sent requests and responses.	tobhe
2020-03-10	Delete dead code in ikev2_msg_valid_ike_sa().	tobhe
2020-03-10	Make sure 'e' is NULL initialized to prevent nullptr dereference in	tobhe
2020-01-22	delete wasteful ;;	Theo de Raadt
2020-01-16	Add '-p' command line option which allows to configure	tobhe
2019-11-28	Move Notify and Certreq payload handlers after the parser. Modify SA state	tobhe
2019-11-15	Fix error handling in ikev2_msg_send.	tobhe
2019-11-13	Log reason whenever a child SA is freed. This makes it easier to	tobhe
2019-11-11	Cleanup message retransmission handling with new helper functions.	tobhe
2019-08-12	Prepend SPI to send and recv log messages to see which line belongs to	tobhe
2019-05-11	Add support for IKEv2 Message Fragmentation as defined in RFC 7383.	Patrick Wildt
2019-05-10	Enforce messages after IKE_SA_INIT exchange to contain only	Patrick Wildt
2017-11-27	Implement MOBIKE (RFC 4555) support in iked(8), with us acting as	Patrick Wildt
2017-04-26	cope with IP address changes. before, we were trying to resend the msg	Henning Brauer
2017-03-27	Add support to reflect the responder IKEv2 COOKIE.	Reyk Floeter
2017-03-27	Add support for RFC4754 (ECDSA) and RFC7427 authentication.	Reyk Floeter
2017-03-13	NAT-T improvements	Reyk Floeter
2017-01-20	Reset various pointers in ikev2_msg_cleanup	Mike Belopuhov
2017-01-20	Closed SAs should never be treated as valid	Mike Belopuhov
2016-09-04	Now that we have IP_SENDSRCADDR, add sendtofrom().	Vincent Gross
2015-10-19	Remove the ikev1 stub - Since I started iked, it has an empty privsep	Reyk Floeter
2015-10-15	Remove some unnecessary NULL-checks before free(). Change two bzero()	mmcc
2015-08-21	Switch iked to C99-style fixed-width integer types.	Reyk Floeter
2015-03-26	initial support for RFC 7427 signatures, so we are no longer	Markus Friedl
2015-02-15	convert bcmp to memcmp	Ted Unangst
2015-02-06	unneeded getopt.h	Theo de Raadt
2015-01-19	Remove unnecessary <netinet/ip_ipsp.h> includes	Mike Belopuhov
2015-01-16	Replace <sys/param.h> with <limits.h> and other less dirty headers where	Theo de Raadt
2014-11-07	Repair initiator with PSK auth	Mike Belopuhov
2014-08-25	Delete secret or secret-derived data with explicit_bzero.	Doug Hogan
2014-05-07	print msgid for debugging; ok reyk & mikeb	Markus Friedl
2014-05-06	initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkey	Markus Friedl
2014-05-05	the caller of ikev2_msg_retransmit_response already frees the sa; ok mikeb	Markus Friedl
2014-04-29	make sure the state machine only advances if the AUTH payload has	Markus Friedl
2014-04-22	Update iked to use the same proc.c that relayd uses.	Reyk Floeter
2014-04-10	Add validation routines to ikev2_pld.c: For each payload type overall	Reyk Floeter
2014-02-17	Fix compiler warnings in the format strings: use %zd for ssize_t and	Reyk Floeter
2014-01-24	use a bit saner timer api	Mike Belopuhov
2013-12-03	never cast to sockaddr_storage, always cast to the abstract 'class' sockaddr	Markus Friedl
2013-09-26	After some manipulations with the buffer, ike message header (hdr)	Mike Belopuhov
2013-03-21	remove excessive includes	Theo de Raadt
2013-01-08	Remove private CVS tag from an obsolete repository and bump copyright	Reyk Floeter
2012-12-15	Remove unused variables.	Reyk Floeter
2012-10-22	Fix NAT-T support in iked, both on the initiator and the responder	Reyk Floeter