src - OpenBSD base system

Age	Commit message (Expand)	Author
2021-03-01	Make sure sa_policy is not NULL in sa_configure_iface(). This can happen	tobhe
2021-02-13	Add dynamic address configuration for roadwarrior clients.	tobhe
2021-02-12	Fix local and peer addresses in policy lookup for dangling SAs	tobhe
2021-02-09	Add optional 'group none' transform for child SAs and fix handling of	tobhe
2021-02-01	Take flows into consideration for policy lookup as initiator.	tobhe
2020-12-21	Use policy_test() to reassign existing SAs to updated policies after	tobhe
2020-12-02	The skip steps must be set up for each attribute independently	tobhe
2020-11-25	Fix proposal error handling. If a proposal contains an unknown transform	tobhe
2020-11-18	Constify sa in ikev2_pld_eap(). The parser code must not change any	tobhe
2020-09-09	Delete dead code.	tobhe
2020-08-23	Add a new configuration option to limit the number of connections for	tobhe
2020-08-15	Remove dead assignments.	tobhe
2020-08-06	Delete commented out code.	tobhe
2020-07-21	Handle TEMPORARY_FAILURE notification on IKESA rekeying.	tobhe
2020-07-16	Make sure to update policy dependant SA fields after policy_lookup().	tobhe
2020-06-03	Pass sockaddr instead of sockaddr_storage to sa_address.	tobhe
2020-05-26	Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.	tobhe
2020-05-13	Remove unnecessary logging messages.	tobhe
2020-05-11	Fix policy lookup edge case for simultaneous transport and tunnel mode SAs.	tobhe
2020-04-28	The order of arguments to proposals_negotiate makes a difference.	tobhe
2020-04-23	Add support for switching rdomain on IPsec encryption/decryption.	tobhe
2020-04-04	It makes no sense to fall back to original policy if the relookup with the	tobhe
2020-03-10	Relookup policy based on received cryptographic parameter proposal.	tobhe
2020-03-09	Use TAILQ_FOREACH_SAFE instead of hand rolled loops.	tobhe
2020-03-01	When the proposals are first matched the responder does	tobhe
2020-01-07	Link ESP-SA and IPcomp-SA using GRPSPIS instead of using a self-built	tobhe
2019-12-28	Refactor child SA cleanup.	tobhe
2019-12-10	We can receive a delete and free an SA that is referenced in sa_nextr.	tobhe
2019-12-03	Correctly represent flows as traffic selectors as described in RFC 7296. This	tobhe
2019-11-30	Log loaded SPIs and flows.	tobhe
2019-11-13	Log reason whenever a child SA is freed. This makes it easier to	tobhe
2019-08-12	Prepend SPI to send and recv log messages to see which line belongs to	tobhe
2017-11-27	Implement MOBIKE (RFC 4555) support in iked(8), with us acting as	Patrick Wildt
2017-03-13	Resolve simultaneous IKE SA rekeying	Mike Belopuhov
2017-03-13	When freeing a Child SA make sure it's peer no longer points to it	Mike Belopuhov
2017-03-13	flow_cmp() must compare the same flow-attributes as the kernel,	Patrick Wildt
2017-03-13	We need to call policy_ref() for policies that have refcounting	Patrick Wildt
2016-06-01	Implement a second address pool specifically for IPv6, so that	Patrick Wildt
2015-10-20	Fix ocsp by adding a missing TAILQ_INIT().	Reyk Floeter
2015-10-01	Fix interoperability with Apple iOS9: If we don't get a (valid)	Reyk Floeter
2015-08-21	Switch iked to C99-style fixed-width integer types.	Reyk Floeter
2015-08-19	spacing (no binary change, verified with checksums)	Reyk Floeter
2015-07-07	repair policy-ikesa-linking by replacing the broken RB_TREE w/TAILQ	Markus Friedl
2015-01-16	Replace <sys/param.h> with <limits.h> and other less dirty headers where	Theo de Raadt
2014-11-07	Fixup a few problems with EAP state transition	Mike Belopuhov
2014-05-06	initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkey	Markus Friedl
2014-05-06	cleanup IKE-SA tree handling (fixes repeated-insert & double-remove)	Markus Friedl
2014-04-29	make sure the state machine only advances if the AUTH payload has	Markus Friedl
2014-02-21	support rekeying for IPCOMP; ok mikeb@	Markus Friedl
2014-02-17	interpret 'config address net/prefix' as a pool of addresses and	Markus Friedl