| Age | Commit message (Expand) | Author |
|---|
| 2022-07-04 | Ignore any CERT payload after the first instead of failing the exchange | Tobias Heider |
| 2022-07-04 | Fix error in the comparison of the Child SA nonces to decide which | Tobias Heider |
| 2022-05-28 | Since 'sa' can be freed inside the loop, RB_FOREACH_SAFE is required. | Gerhard Roth |
| 2022-05-17 | Move towards OpenIKED 7.1 | Tobias Heider |
| 2022-05-08 | Move ikev2_reset_alive_timer() to a place where it makes more sense. The idea | Tobias Heider |
| 2022-04-13 | IKED_LIFETIME_BYTES is > 2GB, and potentially used in strange place, | Theo de Raadt |
| 2022-04-13 | Document sntrup761x25519 key exchange. | Tobias Heider |
| 2022-04-11 | Fix leak of esnxf if esn ore noesn are configured explicitly. | Tobias Heider |
| 2022-03-16 | Make sure contents of vroute messages are aligned properly. | Tobias Heider |
| 2022-03-14 | Improve retransmission of message fragments. RFC 7383 states that loss of | Tobias Heider |
| 2022-02-13 | SKEEYSEED -> SKEYSEED | mbuhl |
| 2022-02-06 | remove please from manual pages | Jonathan Gray |
| 2022-01-28 | When it's the possessive of 'it', it's spelled "its", without the | Philip Guenther |
| 2021-12-23 | fix off by one in bounds test | Jonathan Gray |
| 2021-12-14 | Move raw pubkey bytes to EVP_PKEY conversion to common function. | Tobias Heider |
| 2021-12-13 | Fix asprintf() error check. Portable code should check the return | Theo Buehler |
| 2021-12-13 | Fix a few leaks due to X509_NAME_oneline(name, NULL, 0) dynamically | Theo Buehler |
| 2021-12-13 | Avoid a potential double free in group_free() | Theo Buehler |
| 2021-12-13 | Cleanup libcrypto memory management. Remove redundant NULL checks | Tobias Heider |
| 2021-12-09 | Properly enable NAT-T without udpencap if mobike was negotiated without NAT. | Tobias Heider |
| 2021-12-09 | Move switch to NAT-T port and udpencap activation to ikev2_enable_natt(). | Tobias Heider |
| 2021-12-08 | The /etc/iked/certs/ directory is used for both local and peer | Tobias Heider |
| 2021-12-07 | Fix locally stored peer certificates in /etc/iked/certs as documented in | Tobias Heider |
| 2021-12-06 | Logging received addresses and DNS configuration only makes sense for | Tobias Heider |
| 2021-12-04 | Send out dstid as initiator if configured. This makes it easier for | Tobias Heider |
| 2021-12-01 | whitespace cleanup during review read | Theo de Raadt |
| 2021-11-30 | whitespace | Tobias Heider |
| 2021-11-29 | add -V to usage(), and list it before -v in both SYNOPSIS and the | Jason McIntyre |
| 2021-11-29 | Add command line option to show the version | Tobias Heider |
| 2021-11-29 | sys/param.h was included for MAX(), MIN() and roundup(). make local | Theo de Raadt |
| 2021-11-27 | Rename msg_id to msg_peerid now that we also have msg_localid. | Tobias Heider |
| 2021-11-26 | A peer sends both his local id and remote id he expects us to be. So far we | Patrick Wildt |
| 2021-11-26 | Fix ikev2_child_sa_rekey() warnings. The SPI can't be printed without a | Tobias Heider |
| 2021-11-25 | Remove unused variable fd. | Tobias Heider |
| 2021-11-25 | Silence unitialized variable warnings. | Tobias Heider |
| 2021-11-24 | Unregister event on pfkey socket during pfkey_reply(). Using events | Tobias Heider |
| 2021-11-24 | Pass env to pfkey API. Consistently call pfkey file descriptor fd. | Tobias Heider |
| 2021-11-23 | Add logging for rekey failures. | Tobias Heider |
| 2021-11-22 | MOBIKE is RFC 4555. | Tobias Heider |
| 2021-11-21 | Add 'ikectl show certinfo' to show trusted CAs and certificates. | Tobias Heider |
| 2021-11-20 | Fix some strdup() leaks in ocsp config option. | Tobias Heider |
| 2021-11-19 | Check stdrup() return value. | Tobias Heider |
| 2021-11-18 | iked: replace a conditional EVP_CIPHER_CTX_cleanup() + free() stanza | Theo Buehler |
| 2021-11-18 | Check if encoding works in dsa_init(). This avoids calling fatal() | Tobias Heider |
| 2021-11-16 | Zero all copies of pre-shared key. | Tobias Heider |
| 2021-11-15 | style | Tobias Heider |
| 2021-11-13 | The key/nonce disclaimers were copied from ipsec.conf.5 but aren't relevant | Tobias Heider |
| 2021-11-12 | Refactor order of checks when handling IKEv2 message fragments. | Tobias Heider |
| 2021-11-10 | Look for INVALID_KE group from IKE_SA_INIT in IKE transforms, | Tobias Heider |
| 2021-11-09 | Use more sensible transforms in example config. | Tobias Heider |
