src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-03-24	Make our CERTREQ payload handling less strict. If we can not find a	tobhe
2020-03-24	Always clear sa_simult when initiating a new CREATE_CHILD_SA exchange, not	tobhe
2020-03-24	The certreq payload has no use in PSK authenticated exchanges. Once we are	tobhe
2020-03-24	Fix user database corruption from 'ikectl reload'. Copy only the new password	tobhe
2020-03-22	Add 'ikectl show sa' command to print information about the state of	tobhe
2020-03-20	Unset 'sa->sa_simult' when the exchange fails with CHILD_SA_NOT_FOUND.	tobhe
2020-03-18	Add 'ikectl reset id <ID>' command to reset all SAs from policies with	tobhe
2020-03-16	Handle allocation failure in reallocarry. Print errors with log_info.	tobhe
2020-03-16	Correctly calculate IPv6 address leases from small address pools.	tobhe
2020-03-10	Relookup policy based on received cryptographic parameter proposal.	tobhe
2020-03-10	Make sure 'pooladdr' is zero initialized.	tobhe
2020-03-10	Fix memory leak of 'cr' if allocation of 'cr->data' fails.	tobhe
2020-03-10	Make sure ikev2_next_payload() is only called when there is a previous	tobhe
2020-03-10	Return when SA lookup fails in ikev2_init_recv().	tobhe
2020-03-10	Delete dead code in ikev2_msg_valid_ike_sa().	tobhe
2020-03-10	Make sure 'e' is NULL initialized to prevent nullptr dereference in	tobhe
2020-03-09	Use TAILQ_FOREACH_SAFE instead of hand rolled loops.	tobhe
2020-03-01	When the proposals are first matched the responder does	tobhe
2020-02-21	Add transport mode for child SAs. This is useful for GRE over IPsec and	tobhe
2020-02-16	Quote variables in pf tag strings	kn
2020-02-14	Switch from EVP_SignInit_ex() to the newer EVP_DigestSignInit()	tobhe
2020-02-13	Constify "buf" argument in print_hex and print_hexval.	tobhe
2020-02-10	briefly mention /etc/examples/ in the FILES section of all the	Ingo Schwarze
2020-01-22	delete wasteful ;;	Theo de Raadt
2020-01-21	use an underscore for -p's argument, rather than hyphen: matches SYNOPSIS	Jason McIntyre
2020-01-16	Add '-p' command line option which allows to configure	tobhe
2020-01-15	Support multiple x509 extensions and extensions with multiple	tobhe
2020-01-15	s/deprecated/ignored/ in the warning message if -6 is used; the option	Stuart Henderson
2020-01-15	If we don't find a certificate signed by a trusted CA	tobhe
2020-01-14	Remove IPsec flow blocking unencrypted IPv6 traffic which was	tobhe
2020-01-08	Unify duplicate NOTIFY payload construction code in ikev2_add_notify and	tobhe
2020-01-07	Link ESP-SA and IPcomp-SA using GRPSPIS instead of using a self-built	tobhe
2019-12-28	Refactor child SA cleanup.	tobhe
2019-12-10	We can receive a delete and free an SA that is referenced in sa_nextr.	tobhe
2019-12-03	Correctly represent flows as traffic selectors as described in RFC 7296. This	tobhe
2019-12-01	Explain how ipcomp can be enabled.	tobhe
2019-11-30	The message sent in config_setmode starts the handshake in the ikev2 process	tobhe
2019-11-30	Log loaded SPIs and flows.	tobhe
2019-11-29	Change the default security level for incoming IPsec flows from	tobhe
2019-11-28	Merge host_v{4,6}() into host_ip(), simplify host()	kn
2019-11-28	Introduce copy_sockaddrtoipa() and set_ipmask() bits from pfctl	kn
2019-11-28	Move Notify and Certreq payload handlers after the parser. Modify SA state	tobhe
2019-11-18	Enable ESP UDP-encapsulation with '-t' flag.	tobhe
2019-11-15	IKEv2 message fragments of the same message have the same msg_id. When	tobhe
2019-11-15	Fix error handling in ikev2_msg_send.	tobhe
2019-11-13	Log reason whenever a child SA is freed. This makes it easier to	tobhe
2019-11-12	fix a formatting warning;	Jason McIntyre
2019-11-12	Add configuration options to explicitly specify ESN support for child SAs.	tobhe
2019-11-11	Cleanup message retransmission handling with new helper functions.	tobhe
2019-09-26	Use SPI_SA() instead of __func__ in all logging calls. Use log_info	tobhe