summaryrefslogtreecommitdiff
path: root/sbin/iked
AgeCommit message (Expand)Author
2024-04-25add fstat() call removed in 1.145 to avoid uninitialised var useJonathan Gray
2024-04-13check group and world permissions of iked psk filesjrick
2024-04-13document "psk file path" notation; from josh rickmarJason McIntyre
2024-04-09Sync removal of setsid(), setpgid() and a few dup2() from relayd. They areTobias Heider
2024-04-08Move daemon() after proc_setup() to sync with other proc.c daemons.Tobias Heider
2024-04-02Add check to make sure EAP header length matches expected payload length.Tobias Heider
2024-03-24Remove radius.c which is added mistakenly and under review.YASUOKA Masahiko
2024-03-24Allow zero-length identity responseYASUOKA Masahiko
2024-03-21Avoid redundant allocation in ikev2_prfplus()Tobias Heider
2024-03-02Trigger retransmission only for fragment 1/x, otherwise each receivedTobias Heider
2024-03-02Bump to OpenIKED 7.4Tobias Heider
2024-02-15Introduce new IMSG_CTL_PROCREADY which is used to signal that all pipesTobias Heider
2024-02-15Delay enabling sockets until ikev2 process is ready.Tobias Heider
2024-02-15Remove unused control_socks queue.Tobias Heider
2024-02-13Control startup of PROC_CERT and PROC_IKEV2.Tobias Heider
2024-02-06Pass struct iked directly to ca_reset() instead of passing it via psTobias Heider
2024-02-03fix off-by-one in bounds testJonathan Gray
2024-02-03correct buffer size argument to snprintf in print_proto()Jonathan Gray
2024-01-24Use per connection peerid for control repliesTobias Heider
2024-01-17Convert to use imsg_get_fd()Claudio Jeker
2024-01-15Add debug message for no policy found.Jan Klemkow
2024-01-15Include cert_partial_chain in iked_static instead of sending a separateTobias Heider
2023-12-12ibuf_getdata() abuses the rpos from the ibuf. This is no longer allowedClaudio Jeker
2023-11-24Empty IKEv2 DPD messages should not contain extra NONE payloadsTobias Heider
2023-11-10Always prefer group from initial KE payload as responder if supported.Tobias Heider
2023-09-02Make sure cert_type is not 0 to prevent leak of certid->id_buf.Tobias Heider
2023-09-02Remove unneccessary id == NULL check after dereferencing it. id can neverTobias Heider
2023-08-14Improve error message when if_indextoname() fails.Tobias Heider
2023-08-14Add explicit NULL checks for sa_cp_addr and sa_cp_addr6.Tobias Heider
2023-08-11Add iked support for route based sec(4) tunnels.Tobias Heider
2023-08-04Convert calls to ibuf_length() where it is clear that the ibuf is notClaudio Jeker
2023-07-28Implement print_hexbuf() to hexdump the contents of an ibuf.Claudio Jeker
2023-07-28Use ibuf_data() instead of accessing the ibuf buf pointer directly.Claudio Jeker
2023-07-18Kill ibuf_cat() since there is now ibuf_add_buf() in the official API.Claudio Jeker
2023-07-16Merge ibuf_get() with ibuf_getdata() and rename it to ibuf_getdata().Claudio Jeker
2023-06-28Add support to verify X509 chain from CERT payloads.Tobias Heider
2023-06-28Don't call daemon() after proc_init(), otherwise the child processesGerhard Roth
2023-06-25remove ca_sslinit()Omar Polo
2023-06-19Improve the ibuf API by adding these functions:Claudio Jeker
2023-06-17Fix leak of key.id_buf in pubkey auth case.Tobias Heider
2023-06-16Now that print_host() is unused, rename it to print_addr() and simplify.Theo Buehler
2023-06-14Replace the last few print_host() calls with print_addr() ones.Claudio Jeker
2023-06-13iked: introduce and use print_addr()Theo Buehler
2023-06-13Fix FILE leak in error path.Claudio Jeker
2023-06-12Use stdio open_memstream(3) to build up log strings instead of trying toClaudio Jeker
2023-06-06Use same pattern to work with offset by using a uint8_t pointer thatClaudio Jeker
2023-06-06Use ibuf_seek() instead of ibuf_data() + offset constructs. Effect isClaudio Jeker
2023-05-30Replace the one use of ibuf_prepend() using a similar ibuf_new() + ibuf_cat()Claudio Jeker
2023-05-23Replace ibuf_advance() with ibuf_reserve().Claudio Jeker
2023-05-23Replace ibuf_release() with ibuf_free() since the former just calls the latterClaudio Jeker
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-03 18:59:41 +0000