summaryrefslogtreecommitdiff
path: root/sbin/iked
AgeCommit message (Expand)Author
2011-08-27Under certain circumstances iked can be tricked to bypass a signatureMike Belopuhov
2011-08-19as with other list types, column lists generally do not need a Pp/-compactJason McIntyre
2011-07-05fix memcpy sizeof. found by jsg. ok deraadt krw mikebTed Unangst
2011-07-05Fix IKEV2_N_NO_ADDITIONAL_SAS notification by including the SPIMike Belopuhov
2011-07-03iked requires the same dh diff as isakmpd:Mike Belopuhov
2011-05-27spacingReyk Floeter
2011-05-09bump copyrightReyk Floeter
2011-05-09rename functions in proc.c to proc_* and move some code from imsg_util.c toReyk Floeter
2011-05-05Small tweak - add direct pointer to env instead of using an indirect one.Reyk Floeter
2011-05-05Move the proc.c-specific runtime state out of struct iked into a sub-struct.Reyk Floeter
2011-05-05rename iked_proc* to privsep_proc*. no functional change.Reyk Floeter
2011-05-02store the peer address as it was specified in the policy in theMike Belopuhov
2011-04-18Improve the iked acquire mode peer <-> policy matching. This changeReyk Floeter
2011-04-18When the kernel wants to acquire an SA for an unknown flow, lookup aReyk Floeter
2011-04-15remove unused function ikev2_flows_delete()Reyk Floeter
2011-01-28improve behavior of drop_sa: always negotiating a new child sa; ok reykMike Belopuhov
2011-01-26Don't initiate any connections in passive mode, not even for ACQUIRE messagesReyk Floeter
2011-01-26get rid of acquire flows completely, as they tend to pass trafficMike Belopuhov
2011-01-26enable child sas and do sa and flow transfer after succeeding withMike Belopuhov
2011-01-25fixup child sa deletion in drop_sa; ok reykMike Belopuhov
2011-01-24fixup previous for the responder modeMike Belopuhov
2011-01-21repair rekeying by sending appropriate traffic selector; ok reykMike Belopuhov
2011-01-21don't use memcmp on comparing two iked_addrs but IKED_ADDR_EQ.Reyk Floeter
2011-01-21- Fix traffic selector configuration that it is always "from $localnetReyk Floeter
2011-01-21Remove misleading error message.Reyk Floeter
2011-01-21don't create child sas from empty proposals.Reyk Floeter
2011-01-21handle empty encrypted payloads (might happen with some informationals)Reyk Floeter
2011-01-21tweak previous;Jason McIntyre
2011-01-21Reimplement the iked(8) policy evaluation for incoming connections toReyk Floeter
2011-01-21split pfkey initialization into a privileged and unprivileged part toReyk Floeter
2011-01-18reyk noticed that my rb-tree-fu is not that great. fixup compare functionMike Belopuhov
2011-01-17silence stupid gcc warning by initializing a variable with NULL.Reyk Floeter
2011-01-17Add initial acquire mode support and use it whenever Windows peers decideMike Belopuhov
2011-01-17move mask2prefixlen functions to the util module; ok reykMike Belopuhov
2011-01-12postpone processing of pfkey messages received in pfkey_reply instead ofMike Belopuhov
2011-01-12decouple flow deletion from the ikev2_childsa_delete; ok reykMike Belopuhov
2011-01-12fixup bogus check; ok reykMike Belopuhov
2011-01-12don't forget to specify spi sizes; ok reykMike Belopuhov
2010-12-23pick netmask instead of address when we mean it; found by dhill, ok reykMike Belopuhov
2010-12-23always add a none payload, should fix ike sa rekeying for responders; ok reykMike Belopuhov
2010-12-22move and rename util.c:print_id() to ikev2.c:ikev2_print_id() becauseReyk Floeter
2010-12-22split util.c into two files: imsg_util.c for ibuf/imsg stuff and util forReyk Floeter
2010-12-22ikev2 rfc was recently updated, so list the newer one; ok reykMike Belopuhov
2010-12-22Tweak the grammar a little bit by requiring a "bytes" keyword before theReyk Floeter
2010-12-22Fix a little control socket bug, as discussed with mikeb@Reyk Floeter
2010-12-22child sa rekeying revamp plus numerous bugfixes;Mike Belopuhov
2010-12-21Convert netmask from sockaddr to prefixlen correctly as noticedMike Belopuhov
2010-12-21fixup log_warn and log_debug arguments; ok reykMike Belopuhov
2010-12-01Clarify the internal ibuf API: rename ibuf_copy() to ibuf_get() becauseReyk Floeter
2010-11-29make key exchange faster by not checking the predefined groups with DH_check()Markus Friedl
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-11 14:08:49 +0000