Age | Commit message (Expand) | Author |
2014-05-09 | get rid of redundant {csa,flow}_{src,dst}id pointers, so we don't need | Markus Friedl |
2014-05-09 | replace iked_transform pointer with xform id, since target of pointer | Markus Friedl |
2014-05-07 | try postponed requests first, so we do in-order processing; ok mikeb@ | Markus Friedl |
2014-05-06 | initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkey | Markus Friedl |
2014-05-05 | pfkey is unreliable, so add a select-timeout before MSG_PEEK; | Markus Friedl |
2014-05-05 | don't leak on pid mismatch; ok mikeb | Markus Friedl |
2014-05-05 | change surprisingly consistent mispelling of length ("lenght") | Bret Lambert |
2014-04-25 | don't access a pointer till after the null check | Jonathan Gray |
2014-02-21 | support rekeying for IPCOMP; ok mikeb@ | Markus Friedl |
2014-02-14 | initial support for IPComp | Markus Friedl |
2014-01-22 | implement DPD similar to isakmpd, but only send DPD-messages 'on-demand' | Markus Friedl |
2013-12-03 | never cast to sockaddr_storage, always cast to the abstract 'class' sockaddr | Markus Friedl |
2013-11-14 | ignore messages for other daemons, like isakmpd does; ok mikeb | Markus Friedl |
2013-11-14 | setup pfkey timer before use; ok mikeb | Markus Friedl |
2013-03-21 | remove excessive includes | Theo de Raadt |
2013-01-08 | Remove private CVS tag from an obsolete repository and bump copyright | Reyk Floeter |
2012-11-29 | Prevent VPN traffic leakages in dual-stack hosts/networks. | Reyk Floeter |
2012-10-23 | Change the order of variables just to shrink the diff to the (not yet | Reyk Floeter |
2012-09-18 | update email addresses to match reality. | Reyk Floeter |
2012-06-29 | Add missing ESN bits | Mike Belopuhov |
2012-03-24 | fix some leaks | Jonathan Gray |
2011-05-27 | spacing | Reyk Floeter |
2011-05-05 | rename iked_proc* to privsep_proc*. no functional change. | Reyk Floeter |
2011-01-26 | get rid of acquire flows completely, as they tend to pass traffic | Mike Belopuhov |
2011-01-21 | split pfkey initialization into a privileged and unprivileged part to | Reyk Floeter |
2011-01-17 | Add initial acquire mode support and use it whenever Windows peers decide | Mike Belopuhov |
2011-01-12 | postpone processing of pfkey messages received in pfkey_reply instead of | Mike Belopuhov |
2010-12-22 | move and rename util.c:print_id() to ikev2.c:ikev2_print_id() because | Reyk Floeter |
2010-12-22 | child sa rekeying revamp plus numerous bugfixes; | Mike Belopuhov |
2010-09-23 | support for aes-gcm | Mike Belopuhov |
2010-07-01 | Add support for the tap extension (ikev2 ... tap "enc1") that will | Reyk Floeter |
2010-06-26 | Include the Id type in the generated SA tag that is passed to the | Reyk Floeter |
2010-06-14 | Initial support for initiator mode which allows to run iked as a | Reyk Floeter |
2010-06-10 | add new commands: the couple/decouple commands will set loading of the | Reyk Floeter |
2010-06-10 | simplify the pfkey code by adding a pfkey_write() function | Reyk Floeter |
2010-06-04 | Fix NAT-T detection to enable UDP encapsulation. It was done before, | Reyk Floeter |
2010-06-03 | Import iked, a new implementation of the IKEv2 protocol. | Reyk Floeter |