src - OpenBSD base system

Age	Commit message (Expand)	Author
2012-04-05	rate-limit accepting of new connections while we are experiencing	Theo de Raadt
2012-03-24	fix some leaks	Jonathan Gray
2011-09-03	make -column lists pretty again;	Jason McIntyre
2011-08-27	Under certain circumstances iked can be tricked to bypass a signature	Mike Belopuhov
2011-08-19	as with other list types, column lists generally do not need a Pp/-compact	Jason McIntyre
2011-07-05	fix memcpy sizeof. found by jsg. ok deraadt krw mikeb	Ted Unangst
2011-07-05	Fix IKEV2_N_NO_ADDITIONAL_SAS notification by including the SPI	Mike Belopuhov
2011-07-03	iked requires the same dh diff as isakmpd:	Mike Belopuhov
2011-05-27	spacing	Reyk Floeter
2011-05-09	bump copyright	Reyk Floeter
2011-05-09	rename functions in proc.c to proc_* and move some code from imsg_util.c to	Reyk Floeter
2011-05-05	Small tweak - add direct pointer to env instead of using an indirect one.	Reyk Floeter
2011-05-05	Move the proc.c-specific runtime state out of struct iked into a sub-struct.	Reyk Floeter
2011-05-05	rename iked_proc* to privsep_proc*. no functional change.	Reyk Floeter
2011-05-02	store the peer address as it was specified in the policy in the	Mike Belopuhov
2011-04-18	Improve the iked acquire mode peer <-> policy matching. This change	Reyk Floeter
2011-04-18	When the kernel wants to acquire an SA for an unknown flow, lookup a	Reyk Floeter
2011-04-15	remove unused function ikev2_flows_delete()	Reyk Floeter
2011-01-28	improve behavior of drop_sa: always negotiating a new child sa; ok reyk	Mike Belopuhov
2011-01-26	Don't initiate any connections in passive mode, not even for ACQUIRE messages	Reyk Floeter
2011-01-26	get rid of acquire flows completely, as they tend to pass traffic	Mike Belopuhov
2011-01-26	enable child sas and do sa and flow transfer after succeeding with	Mike Belopuhov
2011-01-25	fixup child sa deletion in drop_sa; ok reyk	Mike Belopuhov
2011-01-24	fixup previous for the responder mode	Mike Belopuhov
2011-01-21	repair rekeying by sending appropriate traffic selector; ok reyk	Mike Belopuhov
2011-01-21	don't use memcmp on comparing two iked_addrs but IKED_ADDR_EQ.	Reyk Floeter
2011-01-21	- Fix traffic selector configuration that it is always "from $localnet	Reyk Floeter
2011-01-21	Remove misleading error message.	Reyk Floeter
2011-01-21	don't create child sas from empty proposals.	Reyk Floeter
2011-01-21	handle empty encrypted payloads (might happen with some informationals)	Reyk Floeter
2011-01-21	tweak previous;	Jason McIntyre
2011-01-21	Reimplement the iked(8) policy evaluation for incoming connections to	Reyk Floeter
2011-01-21	split pfkey initialization into a privileged and unprivileged part to	Reyk Floeter
2011-01-18	reyk noticed that my rb-tree-fu is not that great. fixup compare function	Mike Belopuhov
2011-01-17	silence stupid gcc warning by initializing a variable with NULL.	Reyk Floeter
2011-01-17	Add initial acquire mode support and use it whenever Windows peers decide	Mike Belopuhov
2011-01-17	move mask2prefixlen functions to the util module; ok reyk	Mike Belopuhov
2011-01-12	postpone processing of pfkey messages received in pfkey_reply instead of	Mike Belopuhov
2011-01-12	decouple flow deletion from the ikev2_childsa_delete; ok reyk	Mike Belopuhov
2011-01-12	fixup bogus check; ok reyk	Mike Belopuhov
2011-01-12	don't forget to specify spi sizes; ok reyk	Mike Belopuhov
2010-12-23	pick netmask instead of address when we mean it; found by dhill, ok reyk	Mike Belopuhov
2010-12-23	always add a none payload, should fix ike sa rekeying for responders; ok reyk	Mike Belopuhov
2010-12-22	move and rename util.c:print_id() to ikev2.c:ikev2_print_id() because	Reyk Floeter
2010-12-22	split util.c into two files: imsg_util.c for ibuf/imsg stuff and util for	Reyk Floeter
2010-12-22	ikev2 rfc was recently updated, so list the newer one; ok reyk	Mike Belopuhov
2010-12-22	Tweak the grammar a little bit by requiring a "bytes" keyword before the	Reyk Floeter
2010-12-22	Fix a little control socket bug, as discussed with mikeb@	Reyk Floeter
2010-12-22	child sa rekeying revamp plus numerous bugfixes;	Mike Belopuhov
2010-12-21	Convert netmask from sockaddr to prefixlen correctly as noticed	Mike Belopuhov