| Age | Commit message (Expand) | Author |
|---|
| 2017-01-20 | Include only found SPIs into the PAYLOAD_DELETE message | Mike Belopuhov |
| 2017-01-20 | Minor formatting fix | Mike Belopuhov |
| 2015-10-15 | Remove some unnecessary NULL-checks before free(). Change two bzero() | mmcc |
| 2015-10-01 | Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as | Stuart Henderson |
| 2015-10-01 | Fix interoperability with Apple iOS9: If we don't get a (valid) | Reyk Floeter |
| 2015-08-21 | Switch iked to C99-style fixed-width integer types. | Reyk Floeter |
| 2015-08-19 | spacing (no binary change, verified with checksums) | Reyk Floeter |
| 2015-03-26 | initial support for RFC 7427 signatures, so we are no longer | Markus Friedl |
| 2015-02-06 | unneeded getopt.h | Theo de Raadt |
| 2015-01-19 | Remove unnecessary <netinet/ip_ipsp.h> includes | Mike Belopuhov |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2014-11-07 | Run eap_parse on the actual message and only when the length is right | Mike Belopuhov |
| 2014-05-06 | initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkey | Markus Friedl |
| 2014-05-06 | don't sa_free() in the receive path (prevents use-after-free); ok mikeb@ | Markus Friedl |
| 2014-05-06 | make sure some notify payloads are encrypted; ok mikeb@ | Markus Friedl |
| 2014-05-06 | initial support for PFS; ok reyk@ | Markus Friedl |
| 2014-05-05 | validate the attribute length, too; from hshoexer; ok mikeb | Markus Friedl |
| 2014-04-28 | spacing | Reyk Floeter |
| 2014-04-10 | Add validation routines to ikev2_pld.c: For each payload type overall | Reyk Floeter |
| 2014-02-17 | Fix compiler warnings in the format strings: use %zd for ssize_t and | Reyk Floeter |
| 2014-02-14 | initial support for IPComp | Markus Friedl |
| 2014-02-12 | make sure to set the msg_responded flag on the original message; ok mikeb@ | Markus Friedl |
| 2014-01-24 | use a bit saner timer api | Mike Belopuhov |
| 2014-01-22 | implement DPD similar to isakmpd, but only send DPD-messages 'on-demand' | Markus Friedl |
| 2013-12-03 | never cast to sockaddr_storage, always cast to the abstract 'class' sockaddr | Markus Friedl |
| 2013-11-28 | support raw pubkey authentication w/o x509 certificates; | Markus Friedl |
| 2013-03-21 | remove excessive includes | Theo de Raadt |
| 2013-01-08 | Remove private CVS tag from an obsolete repository and bump copyright | Reyk Floeter |
| 2012-12-15 | Don't dereference NULL pointers (and some cleanup here). | Reyk Floeter |
| 2012-10-22 | Fix NAT-T support in iked, both on the initiator and the responder | Reyk Floeter |
| 2012-09-18 | update email addresses to match reality. | Reyk Floeter |
| 2012-06-22 | decouple timer initialization from timer_register | Mike Belopuhov |
| 2012-05-30 | more timer changes | Mike Belopuhov |
| 2012-05-29 | improve timer framework; will be needed soon | Mike Belopuhov |
| 2012-05-07 | Sync up several defines with RFC 5996. IANA has changed the existing | Mike Belopuhov |
| 2012-03-24 | fix some leaks | Jonathan Gray |
| 2011-01-26 | get rid of acquire flows completely, as they tend to pass traffic | Mike Belopuhov |
| 2011-01-17 | Add initial acquire mode support and use it whenever Windows peers decide | Mike Belopuhov |
| 2011-01-12 | decouple flow deletion from the ikev2_childsa_delete; ok reyk | Mike Belopuhov |
| 2010-12-22 | move and rename util.c:print_id() to ikev2.c:ikev2_print_id() because | Reyk Floeter |
| 2010-12-22 | child sa rekeying revamp plus numerous bugfixes; | Mike Belopuhov |
| 2010-09-30 | check that there are transforms in the proposal before trying | Mike Belopuhov |
| 2010-09-22 | support INVALID_KE_PAYLOAD notification sent by the responder in case | Mike Belopuhov |
| 2010-07-28 | Change back to the pre rev 1.11 behaviour of not treating unexpected | Jonathan Gray |
| 2010-07-03 | Better non-debug logging messages when a session is established/closed. | Reyk Floeter |
| 2010-06-27 | When a peer requests a certificate from the local gateway, we first | Reyk Floeter |
| 2010-06-27 | Instead of modifying and fiddling with the IKE SA in the payload | Reyk Floeter |
| 2010-06-26 | revert the files that have been accidentally committed with my | Reyk Floeter |
| 2010-06-26 | mixing any (AF_UNSPEC) with AF_INET/INET6 is not an address family mismatch | Reyk Floeter |
| 2010-06-26 | Include the Id type in the generated SA tag that is passed to the | Reyk Floeter |
