index
:
src
cvs/HEAD
kms/intel
kms/radeon
master
OpenBSD base system
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
sbin
/
iked
/
parse.y
Age
Commit message (
Expand
)
Author
2014-02-17
basic OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"'
Markus Friedl
2014-02-14
initial support for IPComp
Markus Friedl
2014-01-22
relax the cfg file secrecy check slightly to allow group readability
Henning Brauer
2013-12-03
never cast to sockaddr_storage, always cast to the abstract 'class' sockaddr
Markus Friedl
2013-11-28
support raw pubkey authentication w/o x509 certificates;
Markus Friedl
2013-11-25
use u_char for buffers in yylex, for ctype calls
Sebastian Benoit
2013-11-22
Whole bunch of (unsigned char) casts carefully added for ctype calls.
Theo de Raadt
2013-03-21
remove excessive includes
Theo de Raadt
2013-01-08
Remove private CVS tag from an obsolete repository and bump copyright
Reyk Floeter
2012-10-25
Move the arrays of default IKE and ESP transforms into parse.y instead
Reyk Floeter
2012-09-18
update email addresses to match reality.
Reyk Floeter
2012-06-30
enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP
Christian Weisgerber
2012-06-29
Add missing ESN bits
Mike Belopuhov
2012-05-08
rename espxforms to ipsecxforms for clarity
Mike Belopuhov
2012-03-24
fix some leaks
Jonathan Gray
2011-05-27
spacing
Reyk Floeter
2011-04-18
When the kernel wants to acquire an SA for an unknown flow, lookup a
Reyk Floeter
2011-01-21
Reimplement the iked(8) policy evaluation for incoming connections to
Reyk Floeter
2011-01-17
move mask2prefixlen functions to the util module; ok reyk
Mike Belopuhov
2010-12-23
pick netmask instead of address when we mean it; found by dhill, ok reyk
Mike Belopuhov
2010-12-22
Tweak the grammar a little bit by requiring a "bytes" keyword before the
Reyk Floeter
2010-12-22
child sa rekeying revamp plus numerous bugfixes;
Mike Belopuhov
2010-12-21
Convert netmask from sockaddr to prefixlen correctly as noticed
Mike Belopuhov
2010-11-17
Allow the -D command line flag to actually define macros.
Chris Kuethe
2010-09-23
support for aes-gcm
Mike Belopuhov
2010-09-09
- allow esp proposals without integrity and ah proposals without
Mike Belopuhov
2010-08-03
fix linecount bug with comments spanning multiple lines
Henning Brauer
2010-07-22
Don't deref a NULL pointer if tap or tag are not specified in the
Jonathan Gray
2010-07-01
Add support for the tap extension (ikev2 ... tap "enc1") that will
Reyk Floeter
2010-06-26
mixing any (AF_UNSPEC) with AF_INET/INET6 is not an address family mismatch
Reyk Floeter
2010-06-26
Include the Id type in the generated SA tag that is passed to the
Reyk Floeter
2010-06-23
rename the ec groups to either ec2n or ecp (eg. ec155 -> ec2n155 or
Reyk Floeter
2010-06-15
fix keyword sort order
Reyk Floeter
2010-06-14
the ikesa prf config option is currently broken
Reyk Floeter
2010-06-10
Add the -S flag which does the same as "set passive" but matches the
Reyk Floeter
2010-06-10
add new commands: the couple/decouple commands will set loading of the
Reyk Floeter
2010-06-03
Import iked, a new implementation of the IKEv2 protocol.
Reyk Floeter