summaryrefslogtreecommitdiff
path: root/sbin/iked/parse.y
AgeCommit message (Expand)Author
2012-06-30enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPChristian Weisgerber
2012-06-29Add missing ESN bitsMike Belopuhov
2012-05-08rename espxforms to ipsecxforms for clarityMike Belopuhov
2012-03-24fix some leaksJonathan Gray
2011-05-27spacingReyk Floeter
2011-04-18When the kernel wants to acquire an SA for an unknown flow, lookup aReyk Floeter
2011-01-21Reimplement the iked(8) policy evaluation for incoming connections toReyk Floeter
2011-01-17move mask2prefixlen functions to the util module; ok reykMike Belopuhov
2010-12-23pick netmask instead of address when we mean it; found by dhill, ok reykMike Belopuhov
2010-12-22Tweak the grammar a little bit by requiring a "bytes" keyword before theReyk Floeter
2010-12-22child sa rekeying revamp plus numerous bugfixes;Mike Belopuhov
2010-12-21Convert netmask from sockaddr to prefixlen correctly as noticedMike Belopuhov
2010-11-17Allow the -D command line flag to actually define macros.Chris Kuethe
2010-09-23support for aes-gcmMike Belopuhov
2010-09-09- allow esp proposals without integrity and ah proposals withoutMike Belopuhov
2010-08-03fix linecount bug with comments spanning multiple linesHenning Brauer
2010-07-22Don't deref a NULL pointer if tap or tag are not specified in theJonathan Gray
2010-07-01Add support for the tap extension (ikev2 ... tap "enc1") that willReyk Floeter
2010-06-26mixing any (AF_UNSPEC) with AF_INET/INET6 is not an address family mismatchReyk Floeter
2010-06-26Include the Id type in the generated SA tag that is passed to theReyk Floeter
2010-06-23rename the ec groups to either ec2n or ecp (eg. ec155 -> ec2n155 orReyk Floeter
2010-06-15fix keyword sort orderReyk Floeter
2010-06-14the ikesa prf config option is currently brokenReyk Floeter
2010-06-10Add the -S flag which does the same as "set passive" but matches theReyk Floeter
2010-06-10add new commands: the couple/decouple commands will set loading of theReyk Floeter
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter