summaryrefslogtreecommitdiff
path: root/sbin/iked/parse.y
AgeCommit message (Expand)Author
2014-02-17basic OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"'Markus Friedl
2014-02-14initial support for IPCompMarkus Friedl
2014-01-22relax the cfg file secrecy check slightly to allow group readabilityHenning Brauer
2013-12-03never cast to sockaddr_storage, always cast to the abstract 'class' sockaddrMarkus Friedl
2013-11-28support raw pubkey authentication w/o x509 certificates;Markus Friedl
2013-11-25use u_char for buffers in yylex, for ctype callsSebastian Benoit
2013-11-22Whole bunch of (unsigned char) casts carefully added for ctype calls.Theo de Raadt
2013-03-21remove excessive includesTheo de Raadt
2013-01-08Remove private CVS tag from an obsolete repository and bump copyrightReyk Floeter
2012-10-25Move the arrays of default IKE and ESP transforms into parse.y insteadReyk Floeter
2012-09-18update email addresses to match reality.Reyk Floeter
2012-06-30enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPChristian Weisgerber
2012-06-29Add missing ESN bitsMike Belopuhov
2012-05-08rename espxforms to ipsecxforms for clarityMike Belopuhov
2012-03-24fix some leaksJonathan Gray
2011-05-27spacingReyk Floeter
2011-04-18When the kernel wants to acquire an SA for an unknown flow, lookup aReyk Floeter
2011-01-21Reimplement the iked(8) policy evaluation for incoming connections toReyk Floeter
2011-01-17move mask2prefixlen functions to the util module; ok reykMike Belopuhov
2010-12-23pick netmask instead of address when we mean it; found by dhill, ok reykMike Belopuhov
2010-12-22Tweak the grammar a little bit by requiring a "bytes" keyword before theReyk Floeter
2010-12-22child sa rekeying revamp plus numerous bugfixes;Mike Belopuhov
2010-12-21Convert netmask from sockaddr to prefixlen correctly as noticedMike Belopuhov
2010-11-17Allow the -D command line flag to actually define macros.Chris Kuethe
2010-09-23support for aes-gcmMike Belopuhov
2010-09-09- allow esp proposals without integrity and ah proposals withoutMike Belopuhov
2010-08-03fix linecount bug with comments spanning multiple linesHenning Brauer
2010-07-22Don't deref a NULL pointer if tap or tag are not specified in theJonathan Gray
2010-07-01Add support for the tap extension (ikev2 ... tap "enc1") that willReyk Floeter
2010-06-26mixing any (AF_UNSPEC) with AF_INET/INET6 is not an address family mismatchReyk Floeter
2010-06-26Include the Id type in the generated SA tag that is passed to theReyk Floeter
2010-06-23rename the ec groups to either ec2n or ecp (eg. ec155 -> ec2n155 orReyk Floeter
2010-06-15fix keyword sort orderReyk Floeter
2010-06-14the ikesa prf config option is currently brokenReyk Floeter
2010-06-10Add the -S flag which does the same as "set passive" but matches theReyk Floeter
2010-06-10add new commands: the couple/decouple commands will set loading of theReyk Floeter
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter