src - OpenBSD base system

Age	Commit message (Expand)	Author
2011-04-18	Improve the iked acquire mode peer <-> policy matching. This change	Reyk Floeter
2011-04-18	When the kernel wants to acquire an SA for an unknown flow, lookup a	Reyk Floeter
2011-04-15	remove unused function ikev2_flows_delete()	Reyk Floeter
2011-01-28	improve behavior of drop_sa: always negotiating a new child sa; ok reyk	Mike Belopuhov
2011-01-26	Don't initiate any connections in passive mode, not even for ACQUIRE messages	Reyk Floeter
2011-01-26	get rid of acquire flows completely, as they tend to pass traffic	Mike Belopuhov
2011-01-26	enable child sas and do sa and flow transfer after succeeding with	Mike Belopuhov
2011-01-25	fixup child sa deletion in drop_sa; ok reyk	Mike Belopuhov
2011-01-24	fixup previous for the responder mode	Mike Belopuhov
2011-01-21	repair rekeying by sending appropriate traffic selector; ok reyk	Mike Belopuhov
2011-01-21	don't use memcmp on comparing two iked_addrs but IKED_ADDR_EQ.	Reyk Floeter
2011-01-21	- Fix traffic selector configuration that it is always "from $localnet	Reyk Floeter
2011-01-21	Remove misleading error message.	Reyk Floeter
2011-01-21	don't create child sas from empty proposals.	Reyk Floeter
2011-01-21	handle empty encrypted payloads (might happen with some informationals)	Reyk Floeter
2011-01-21	tweak previous;	Jason McIntyre
2011-01-21	Reimplement the iked(8) policy evaluation for incoming connections to	Reyk Floeter
2011-01-21	split pfkey initialization into a privileged and unprivileged part to	Reyk Floeter
2011-01-18	reyk noticed that my rb-tree-fu is not that great. fixup compare function	Mike Belopuhov
2011-01-17	silence stupid gcc warning by initializing a variable with NULL.	Reyk Floeter
2011-01-17	Add initial acquire mode support and use it whenever Windows peers decide	Mike Belopuhov
2011-01-17	move mask2prefixlen functions to the util module; ok reyk	Mike Belopuhov
2011-01-12	postpone processing of pfkey messages received in pfkey_reply instead of	Mike Belopuhov
2011-01-12	decouple flow deletion from the ikev2_childsa_delete; ok reyk	Mike Belopuhov
2011-01-12	fixup bogus check; ok reyk	Mike Belopuhov
2011-01-12	don't forget to specify spi sizes; ok reyk	Mike Belopuhov
2010-12-23	pick netmask instead of address when we mean it; found by dhill, ok reyk	Mike Belopuhov
2010-12-23	always add a none payload, should fix ike sa rekeying for responders; ok reyk	Mike Belopuhov
2010-12-22	move and rename util.c:print_id() to ikev2.c:ikev2_print_id() because	Reyk Floeter
2010-12-22	split util.c into two files: imsg_util.c for ibuf/imsg stuff and util for	Reyk Floeter
2010-12-22	ikev2 rfc was recently updated, so list the newer one; ok reyk	Mike Belopuhov
2010-12-22	Tweak the grammar a little bit by requiring a "bytes" keyword before the	Reyk Floeter
2010-12-22	Fix a little control socket bug, as discussed with mikeb@	Reyk Floeter
2010-12-22	child sa rekeying revamp plus numerous bugfixes;	Mike Belopuhov
2010-12-21	Convert netmask from sockaddr to prefixlen correctly as noticed	Mike Belopuhov
2010-12-21	fixup log_warn and log_debug arguments; ok reyk	Mike Belopuhov
2010-12-01	Clarify the internal ibuf API: rename ibuf_copy() to ibuf_get() because	Reyk Floeter
2010-11-29	make key exchange faster by not checking the predefined groups with DH_check()	Markus Friedl
2010-11-17	Allow the -D command line flag to actually define macros.	Chris Kuethe
2010-11-08	fixup number rounding; ok reyk	Mike Belopuhov
2010-10-14	plug a tiny leak.	David Hill
2010-09-30	promote openssl errors to the warning level; ok reyk	Mike Belopuhov
2010-09-30	check that there are transforms in the proposal before trying	Mike Belopuhov
2010-09-30	disable padding correctly. therefore we no longer need to supply	Mike Belopuhov
2010-09-30	More information about creating and maintaining the PKI with a link to	Reyk Floeter
2010-09-23	support for aes-gcm	Mike Belopuhov
2010-09-22	support INVALID_KE_PAYLOAD notification sent by the responder in case	Mike Belopuhov
2010-09-20	fixup length of an eap identity message payload.	Mike Belopuhov
2010-09-16	pass proper argument to the proc_sig_handler and check env for	Mike Belopuhov
2010-09-09	- allow esp proposals without integrity and ah proposals without	Mike Belopuhov