src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-08-15	Remove dead assignments.	tobhe
2020-08-06	Delete commented out code.	tobhe
2020-07-21	Handle TEMPORARY_FAILURE notification on IKESA rekeying.	tobhe
2020-07-16	Make sure to update policy dependant SA fields after policy_lookup().	tobhe
2020-06-03	Pass sockaddr instead of sockaddr_storage to sa_address.	tobhe
2020-05-26	Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.	tobhe
2020-05-13	Remove unnecessary logging messages.	tobhe
2020-05-11	Fix policy lookup edge case for simultaneous transport and tunnel mode SAs.	tobhe
2020-04-28	The order of arguments to proposals_negotiate makes a difference.	tobhe
2020-04-23	Add support for switching rdomain on IPsec encryption/decryption.	tobhe
2020-04-04	It makes no sense to fall back to original policy if the relookup with the	tobhe
2020-03-10	Relookup policy based on received cryptographic parameter proposal.	tobhe
2020-03-09	Use TAILQ_FOREACH_SAFE instead of hand rolled loops.	tobhe
2020-03-01	When the proposals are first matched the responder does	tobhe
2020-01-07	Link ESP-SA and IPcomp-SA using GRPSPIS instead of using a self-built	tobhe
2019-12-28	Refactor child SA cleanup.	tobhe
2019-12-10	We can receive a delete and free an SA that is referenced in sa_nextr.	tobhe
2019-12-03	Correctly represent flows as traffic selectors as described in RFC 7296. This	tobhe
2019-11-30	Log loaded SPIs and flows.	tobhe
2019-11-13	Log reason whenever a child SA is freed. This makes it easier to	tobhe
2019-08-12	Prepend SPI to send and recv log messages to see which line belongs to	tobhe
2017-11-27	Implement MOBIKE (RFC 4555) support in iked(8), with us acting as	Patrick Wildt
2017-03-13	Resolve simultaneous IKE SA rekeying	Mike Belopuhov
2017-03-13	When freeing a Child SA make sure it's peer no longer points to it	Mike Belopuhov
2017-03-13	flow_cmp() must compare the same flow-attributes as the kernel,	Patrick Wildt
2017-03-13	We need to call policy_ref() for policies that have refcounting	Patrick Wildt
2016-06-01	Implement a second address pool specifically for IPv6, so that	Patrick Wildt
2015-10-20	Fix ocsp by adding a missing TAILQ_INIT().	Reyk Floeter
2015-10-01	Fix interoperability with Apple iOS9: If we don't get a (valid)	Reyk Floeter
2015-08-21	Switch iked to C99-style fixed-width integer types.	Reyk Floeter
2015-08-19	spacing (no binary change, verified with checksums)	Reyk Floeter
2015-07-07	repair policy-ikesa-linking by replacing the broken RB_TREE w/TAILQ	Markus Friedl
2015-01-16	Replace <sys/param.h> with <limits.h> and other less dirty headers where	Theo de Raadt
2014-11-07	Fixup a few problems with EAP state transition	Mike Belopuhov
2014-05-06	initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkey	Markus Friedl
2014-05-06	cleanup IKE-SA tree handling (fixes repeated-insert & double-remove)	Markus Friedl
2014-04-29	make sure the state machine only advances if the AUTH payload has	Markus Friedl
2014-02-21	support rekeying for IPCOMP; ok mikeb@	Markus Friedl
2014-02-17	interpret 'config address net/prefix' as a pool of addresses and	Markus Friedl
2014-01-24	re-lookup the policy as soon as we have the ID of the peer (destid)	Markus Friedl
2014-01-24	make sure sa_lookup() can actually find SAs; ok mikeb	Markus Friedl
2013-12-03	never cast to sockaddr_storage, always cast to the abstract 'class' sockaddr	Markus Friedl
2013-11-28	sa_lookup: don't compare with sh_rspi if rspi is not set	Markus Friedl
2013-11-28	sa_new(): discard & free duplicate IKESAs; ok mibek@	Markus Friedl
2013-10-24	no need for netinet/ip_var.h (and friends)	Theo de Raadt
2013-01-08	Remove private CVS tag from an obsolete repository and bump copyright	Reyk Floeter
2012-12-15	Don't dereference NULL pointers (and some cleanup here).	Reyk Floeter
2012-09-18	update email addresses to match reality.	Reyk Floeter
2012-05-30	when changing peer's address in the SA, remove the old entry from the	Mike Belopuhov
2011-05-02	store the peer address as it was specified in the policy in the	Mike Belopuhov