src - OpenBSD base system

Age	Commit message (Expand)	Author
2024-07-13	Add RADIUS support. Authentication, accounting, and "Dynamic	YASUOKA Masahiko
2024-04-02	Add check to make sure EAP header length matches expected payload length.	Tobias Heider
2024-03-02	Trigger retransmission only for fragment 1/x, otherwise each received	Tobias Heider
2023-09-02	Make sure cert_type is not 0 to prevent leak of certid->id_buf.	Tobias Heider
2023-08-04	Convert calls to ibuf_length() where it is clear that the ibuf is not	Claudio Jeker
2023-06-28	Add support to verify X509 chain from CERT payloads.	Tobias Heider
2023-06-14	Replace the last few print_host() calls with print_addr() ones.	Claudio Jeker
2023-06-06	Use same pattern to work with offset by using a uint8_t pointer that	Claudio Jeker
2023-05-23	Replace ibuf_release() with ibuf_free() since the former just calls the latter	Claudio Jeker
2022-12-06	Print size_t with %zu.	Tobias Heider
2022-12-03	Include endian.h where needed for betohXX functions.	Tobias Heider
2022-09-19	Add iked connection statistics for successful and failed connections, common	Tobias Heider
2022-07-04	Ignore any CERT payload after the first instead of failing the exchange	Tobias Heider
2022-03-14	Improve retransmission of message fragments. RFC 7383 states that loss of	Tobias Heider
2021-12-01	whitespace cleanup during review read	Theo de Raadt
2021-11-27	Rename msg_id to msg_peerid now that we also have msg_localid.	Tobias Heider
2021-11-26	A peer sends both his local id and remote id he expects us to be. So far we	Patrick Wildt
2021-11-12	Refactor order of checks when handling IKEv2 message fragments.	Tobias Heider
2021-09-01	Add client side support for DNS configuration. Use RTM_PROPOSAL_STATIC	Tobias Heider
2021-02-19	Fail on duplicate nonce payload.	tobhe
2021-02-18	Remove redundant ibuf_release. msg_ke is always NULL because of the	tobhe
2021-02-16	Fail on duplicate KE payload.	tobhe
2020-11-25	Fix proposal error handling. If a proposal contains an unknown transform	tobhe
2020-11-23	Ignore duplicate sigsha2 notify, don't fail the exchange.	tobhe
2020-11-22	Fix comment typo.	tobhe
2020-11-21	Clean up NATT hack. Pass 'frompeer' as parameter instead of manipulating	tobhe
2020-11-19	More sa cleanup + constify.	tobhe
2020-11-18	Constify sa in ikev2_pld_eap(). The parser code must not change any	tobhe
2020-10-29	Add initial support to request IP addresses as IKEv2 initiator.	tobhe
2020-10-24	Don't modify sa in ikev2_pld_cp. Store cp_type in msg until message has	tobhe
2020-10-22	Handle NO_PROPOSAL_CHOSEN for initiator in IKE_SA_INIT exchange.	tobhe
2020-10-22	Add missing break.	tobhe
2020-10-19	Handle NO_PROPOSAL_CHOSEN as IKE_AUTH initiator.	tobhe
2020-10-09	More unused headers.	tobhe
2020-10-09	Remove unused "wait.h" includes.	tobhe
2020-10-03	React to DELETE notifications only in INFORMATIONAL messages	tobhe
2020-10-01	Skip DELETE payload responses only after they are validated.	tobhe
2020-09-30	Don't accept AUTH payloads with invalid auth_method 0.	tobhe
2020-09-30	Don't accept ID payloads with ID type IKEV2_ID_NONE.	tobhe
2020-09-29	Check ibuf_seek() return value.	tobhe
2020-09-21	Fix reassembly of out-of-order fragments. Always take the nextpld field	tobhe
2020-09-16	Move all the EAP logic from a single branch in the message parsing code to	tobhe
2020-08-20	Remove redundant variable.	tobhe
2020-08-19	Restructure traffic selector payload parsing. Add additional size and	tobhe
2020-08-16	Clean up unused parameters.	tobhe
2020-08-11	Prioritize incoming certificate requests by the order of CERTEQ payloads	tobhe
2020-08-10	Reduce log spam.	tobhe
2020-08-10	Remove unused argument.	tobhe
2020-07-21	Handle TEMPORARY_FAILURE notification on IKESA rekeying.	tobhe
2020-06-09	Move AUTH_REQUEST SA state change from parser to IKE_AUTH exchange handler.	tobhe