src - OpenBSD base system

Age	Commit message (Expand)	Author
2021-02-16	Fail on duplicate KE payload.	tobhe
2021-02-13	Add dynamic address configuration for roadwarrior clients.	tobhe
2021-02-12	Fix local and peer addresses in policy lookup for dangling SAs	tobhe
2021-02-11	Explicitly unset IKED_REQ_CERTVALID before sending cert to ca process.	tobhe
2021-02-10	Delay deletion of IKE SAs on rekey when stickyaddress is enabled to make	tobhe
2021-02-09	Add optional 'group none' transform for child SAs and fix handling of	tobhe
2021-02-08	Clean up kernel IPsec flows and security associations on shutdown.	tobhe
2021-02-07	Free X509_STOREs in ca_shutdown().	tobhe
2021-02-07	Fix address leaks in expand_flows().	tobhe
2021-02-04	Rename 'struct group' to 'struct dh_group' for more clarity and	tobhe
2021-02-04	EC_POINT_get_affine_coordinates_GFp() and EC_POINT_get_affine_coordinates_GF2m()	tobhe
2021-02-04	Upgrade to OpenSSL 1.1 compatible crypto API. Add additional	tobhe
2021-02-01	Take flows into consideration for policy lookup as initiator.	tobhe
2021-02-01	Whitespace	tobhe
2021-01-31	Ignore addresses that are not 0/32 (dynamic) in ikev2_cp_fixaddr()	tobhe
2021-01-31	Don't leak flows if ikev2_cp_fixflow() fails.	tobhe
2021-01-29	Add proper padding for pfkey messages. Use ROUNDUP() for auth and	tobhe
2021-01-28	Extern privsep_process. Fixes compilation with -fno-common.	mortimer
2021-01-26	Add support for RSA-PSS PKCS1 signatures. Don't enable them by	tobhe
2021-01-24	hmac-sha2-384 and hmac-sha2-512 are enabled by default.	tobhe
2021-01-23	Fix typos.	tobhe
2021-01-21	Handle NO_PROPOSAL_CHOSEN for CREATE_CHILD_SA.	tobhe
2021-01-21	Add support for INVALID_KE_PAYLOAD in CREATE_CHILD_SA	tobhe
2021-01-20	Make sure to enforce matching dstid as initiator. Use policy lookup	tobhe
2021-01-18	Sync SA configuration payload to new SA after IKE SA rekeying.	tobhe
2020-12-29	getifaddrs() can return entries where ifa_addr is NULL. Check for this	Sebastian Benoit
2020-12-28	Add back keyword "any" to match any IP address, which actually works	tobhe
2020-12-27	Fix "any" and "dynamic" keywords for flows and add proper IPv6 support.	tobhe
2020-12-22	Log SPI with SPI_SH() wherever possible.	tobhe
2020-12-21	Use policy_test() to reassign existing SAs to updated policies after	tobhe
2020-12-20	Don't leak ipsec_hosts when building hosts_list.	tobhe
2020-12-17	Use strtonum() instead of atoi() to parse port option.	tobhe
2020-12-17	Sort command line options.	tobhe
2020-12-15	Fix leak of REQUEST string.	tobhe
2020-12-13	Make sure flow src and dst addresses have the same address family.	tobhe
2020-12-11	The keyword "any" does not actually work properly for traffic selectors.	tobhe
2020-12-10	Print valid ikesa/childsa configuration at startup. Comma seperated	tobhe
2020-12-06	Add support for RSASSA-PSS signature verification (RFC 7427).	tobhe
2020-12-05	Make len unsigned.	tobhe
2020-12-04	Log pfkey type and message length on write failure.	tobhe
2020-12-03	Fix type mismatch. auth_method should be uint8_t.	tobhe
2020-12-02	The skip steps must be set up for each attribute independently	tobhe
2020-12-01	Don't log ESRCH as warning.	tobhe
2020-11-30	We need to rekey every child SA (even if acquired): Otherwise we can	tobhe
2020-11-29	Add 'set stickyaddress' option. If this option is enabled, iked will try	tobhe
2020-11-28	Add support for multiple address pools. The parser already allows	tobhe
2020-11-27	Remove redundant state change. ikev2_ikesa_delete() sets the correct state.	tobhe
2020-11-26	Use a counter instead of random IV for AES-GCM. Security depends on	tobhe
2020-11-25	Fix proposal error handling. If a proposal contains an unknown transform	tobhe
2020-11-24	Fix duplicate sa->sa_cp assignment.	tobhe