| Age | Commit message (Expand) | Author |
|---|
| 2012-10-11 | The RSA public keys will be found in a subdirectory of /etc/iked/ | Reyk Floeter |
| 2012-10-09 | "If srcid is omitted, the default is to use the hostname of the local | Reyk Floeter |
| 2012-09-25 | Correct DPADD to not list libssl which is not used by iked. | Brad Smith |
| 2012-09-22 | last stage of rfc changes, using consistent Rs/Re blocks, and moving the | Jason McIntyre |
| 2012-09-18 | update email addresses to match reality. | Reyk Floeter |
| 2012-07-08 | if you use nitems() in userland, you must define it yourself | Theo de Raadt |
| 2012-07-05 | when rekeying ike sa copy more info from the old one; | Mike Belopuhov |
| 2012-07-03 | Improve the key derivation function to produce correct keying material | Mike Belopuhov |
| 2012-07-02 | checking state flags make sense only when processing a response | Mike Belopuhov |
| 2012-07-02 | augment every sa_free call with a debugging log message | Mike Belopuhov |
| 2012-07-02 | Don't close IKE SA immediately after creating a new one when rekeying. | Mike Belopuhov |
| 2012-07-02 | a state machine is not worth the trouble when you've got a flag. doh! | Mike Belopuhov |
| 2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | Christian Weisgerber |
| 2012-06-29 | Add missing ESN bits | Mike Belopuhov |
| 2012-06-27 | leftover code re-enqueued the same item on the list multiple times | Mike Belopuhov |
| 2012-06-27 | prevent an endless loop | Mike Belopuhov |
| 2012-06-26 | improve ikev2_msg_retransmit_timeout | Mike Belopuhov |
| 2012-06-26 | close SA when IKE_SA_INIT or IKE_AUTH exchanges fail; | Mike Belopuhov |
| 2012-06-26 | compare exchange types as well when looking up a message; | Mike Belopuhov |
| 2012-06-22 | Add initial support for retransmition timeouts and response retries. | Mike Belopuhov |
| 2012-06-22 | decouple timer initialization from timer_register | Mike Belopuhov |
| 2012-06-04 | Rounding up a number of bytes in a bignum returned by the BN_num_bytes() | Mike Belopuhov |
| 2012-05-30 | more timer changes | Mike Belopuhov |
| 2012-05-30 | when changing peer's address in the SA, remove the old entry from the | Mike Belopuhov |
| 2012-05-30 | pass a file descriptor in the msg_fd instead of a function argument | Mike Belopuhov |
| 2012-05-29 | improve timer framework; will be needed soon | Mike Belopuhov |
| 2012-05-24 | don't increment the next expected message id when sending a response back. | Mike Belopuhov |
| 2012-05-23 | fixup from/to specification | Mike Belopuhov |
| 2012-05-23 | remove hardcoded values for esp and let ikev2_add_proposals decide | Mike Belopuhov |
| 2012-05-23 | factor out proposal matching code from ikev2_sa_negotiate and eliminate | Mike Belopuhov |
| 2012-05-08 | When setting up NAT-T notify payloads, make sure to supply an | Mike Belopuhov |
| 2012-05-08 | rename espxforms to ipsecxforms for clarity | Mike Belopuhov |
| 2012-05-07 | fixup formatting in the generated files | Mike Belopuhov |
| 2012-05-07 | Sync up several defines with RFC 5996. IANA has changed the existing | Mike Belopuhov |
| 2012-04-24 | take a stab at documenting when arguments need quoted, and valid macro | Jason McIntyre |
| 2012-04-18 | undo an error introduced by myself in previous; | Jason McIntyre |
| 2012-04-05 | rate-limit accepting of new connections while we are experiencing | Theo de Raadt |
| 2012-03-24 | fix some leaks | Jonathan Gray |
| 2011-09-03 | make -column lists pretty again; | Jason McIntyre |
| 2011-08-27 | Under certain circumstances iked can be tricked to bypass a signature | Mike Belopuhov |
| 2011-08-19 | as with other list types, column lists generally do not need a Pp/-compact | Jason McIntyre |
| 2011-07-05 | fix memcpy sizeof. found by jsg. ok deraadt krw mikeb | Ted Unangst |
| 2011-07-05 | Fix IKEV2_N_NO_ADDITIONAL_SAS notification by including the SPI | Mike Belopuhov |
| 2011-07-03 | iked requires the same dh diff as isakmpd: | Mike Belopuhov |
| 2011-05-27 | spacing | Reyk Floeter |
| 2011-05-09 | bump copyright | Reyk Floeter |
| 2011-05-09 | rename functions in proc.c to proc_* and move some code from imsg_util.c to | Reyk Floeter |
| 2011-05-05 | Small tweak - add direct pointer to env instead of using an indirect one. | Reyk Floeter |
| 2011-05-05 | Move the proc.c-specific runtime state out of struct iked into a sub-struct. | Reyk Floeter |
| 2011-05-05 | rename iked_proc* to privsep_proc*. no functional change. | Reyk Floeter |
