src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-11-07	Implement 'from dynamic', which installs flows where 'dynamic' is replaced	tobhe
2020-11-06	Set correct netmask on patched addresses for debug printing.	tobhe
2020-11-05	Enable support for ASN1_DN ipsec identifiers.	Peter Hessler
2020-11-04	Add check for static id size.	tobhe
2020-11-03	Add 'any' keyword for request to allow 'request address any'.	tobhe
2020-11-01	Add 'dynamic' keyword to configure flows to dynamically assigned addresses.	tobhe
2020-10-30	Add missing bits to make 'request addr 0.0.0.0' accept ANY dynamic address.	tobhe
2020-10-30	style(9)	tobhe
2020-10-30	Whitespace fixes.	tobhe
2020-10-30	Fix key payload size. Use size from new SA.	tobhe
2020-10-29	Add initial support to request IP addresses as IKEv2 initiator.	tobhe
2020-10-28	Refactor parts of the dh_* API.	tobhe
2020-10-24	Don't modify sa in ikev2_pld_cp. Store cp_type in msg until message has	tobhe
2020-10-22	Handle NO_PROPOSAL_CHOSEN for initiator in IKE_SA_INIT exchange.	tobhe
2020-10-22	Add missing break.	tobhe
2020-10-21	Remove SAs from ike_dstid_sas on 'ikectl reset sa' to prevent use after free.	tobhe
2020-10-19	Handle NO_PROPOSAL_CHOSEN as IKE_AUTH initiator.	tobhe
2020-10-09	More unused headers.	tobhe
2020-10-09	Remove unused "wait.h" includes.	tobhe
2020-10-06	Always allocate hash_keylength() for buffers passed to hash_final() to	tobhe
2020-10-05	Only handle AUTHENTICATION_FAILED for IKE_AUTH and INFORMATIONAL exchanges.	tobhe
2020-10-03	React to DELETE notifications only in INFORMATIONAL messages	tobhe
2020-10-02	Send AUTH_FAILED in ikev2_ike_auth_recv() if the message did not contain	tobhe
2020-10-01	Skip DELETE payload responses only after they are validated.	tobhe
2020-09-30	Don't accept AUTH payloads with invalid auth_method 0.	tobhe
2020-09-30	Don't accept ID payloads with ID type IKEV2_ID_NONE.	tobhe
2020-09-30	Don't leak sa->sa_peerauth.id_buf.	tobhe
2020-09-29	Check ibuf_seek() return value.	tobhe
2020-09-26	Cleanup msg_eap in ikev2_msg_cleanup().	tobhe
2020-09-25	Simplify RB_TREE cleanup loops.	tobhe
2020-09-24	Cleanup logging, print SPIs where it makes sense.	tobhe
2020-09-23	Add new 'set cert_partial_chain' config option to allow verification of	tobhe
2020-09-21	Fix reassembly of out-of-order fragments. Always take the nextpld field	tobhe
2020-09-19	Add SHA2_384 and SHA2_512 to default proposals.	tobhe
2020-09-18	Fix memory leak in 'n->name'.	tobhe
2020-09-17	Set retransmit timeout for DELETE message on the replaced SA, not on	tobhe
2020-09-17	Do not send DELETE messages for closing SAs.	tobhe
2020-09-17	Merge IKEV2_EXCHANGE_CREATE_CHILD_SA and IKEV2_EXCHANGE_INFORMATIONAL	tobhe
2020-09-16	Move all the EAP logic from a single branch in the message parsing code to	tobhe
2020-09-16	Fix EAP authentication if the initiator sends no certificate	tobhe
2020-09-09	Delete dead code.	tobhe
2020-09-08	Fix auth method negotiation for IKEV2_CERT_X509_CERT. If a cert matching	tobhe
2020-09-06	Drop redundant else for readability.	tobhe
2020-09-05	Use peer from policy, not from the acquire message.	tobhe
2020-09-05	Initialize flow_dir and flow_saproto so policy_test() can find the policy	tobhe
2020-09-04	INFORMATIONAL and CREATE_CHILD_SA exchanges cannot be initiated at the	tobhe
2020-09-03	Log OCSP url on connection failure.	tobhe
2020-09-02	Add 30s timeout for OCSP requests.	tobhe
2020-09-01	Log SPIs to make it easier to map OCSP messages to SAs.	tobhe
2020-09-01	Make OCSP response status logging less verbose.	tobhe