Age | Commit message (Expand) | Author |
2015-12-10 | comment typo | mmcc |
2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
2015-12-07 | Add imsg "peerid" to debug messages (only within -DDEBUG). | Reyk Floeter |
2015-12-07 | Sync proc.c, use shorter proc_compose[v]() | Reyk Floeter |
2015-12-07 | sync with vmd | Reyk Floeter |
2015-12-05 | EAGAIN handling for imsg_read. OK henning@ benno@ | Claudio Jeker |
2015-12-02 | remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@ | Christian Weisgerber |
2015-11-23 | Replace socket_set_blockmode() and fcntl(fd, F_SETFL, O_NONBLOCK) calls | Reyk Floeter |
2015-11-22 | Update log.c: change fatal() and fatalx() into variadic functions, | Reyk Floeter |
2015-11-21 | Once again, fix the license text. After many years, we just cannot | Reyk Floeter |
2015-11-21 | Move local logging functions to util.c (which is shared with ikectl), | Reyk Floeter |
2015-11-19 | Simplify all instances of get_string() and get_data() using malloc() and | mmcc |
2015-11-18 | pledge exposed a simple bug: the unprivileged child tried to print the | Reyk Floeter |
2015-11-04 | Support Chacha20-Poly1305 for Child SAs; ok reyk | Mike Belopuhov |
2015-11-01 | replace "can not" with "cannot"; | Jason McIntyre |
2015-10-31 | pasto | Christian Weisgerber |
2015-10-31 | RFC4754 specifies ECDSA-521 (sic), not -512. ok reyk@ | Christian Weisgerber |
2015-10-23 | push LDSTATIC line down so it's not overridden by makefile.inc. ok reyk | Ted Unangst |
2015-10-22 | iked hereby pledges that it will run with restricted system | Reyk Floeter |
2015-10-22 | Stop linking iked -static: It was inherited from isakmpd that is | Reyk Floeter |
2015-10-20 | Fix ocsp by adding a missing TAILQ_INIT(). | Reyk Floeter |
2015-10-19 | break long lines in examples; ok jmc@ | Christian Weisgerber |
2015-10-19 | Fix control_imsg_forward() by changing imsg_compose() to | Reyk Floeter |
2015-10-19 | Remove the ikev1 stub - Since I started iked, it has an empty privsep | Reyk Floeter |
2015-10-15 | Remove some unnecessary NULL-checks before free(). Change two bzero() | mmcc |
2015-10-02 | Curve25519 is now specified in draft-ietf-ipsecme-safecurves-00 (along | Reyk Floeter |
2015-10-02 | RFC7634 specifies ChaCha20-Poly1305 for IKEv2 and IPsec and IANA | Reyk Floeter |
2015-10-02 | Remove MD5 from the default proposals. At least SHA1 seems to be the | Reyk Floeter |
2015-10-02 | If the policy certreqtype is 0, use the global one instead. | Reyk Floeter |
2015-10-01 | Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as | Stuart Henderson |
2015-10-01 | Fix interoperability with Apple iOS9: If we don't get a (valid) | Reyk Floeter |
2015-08-26 | use 0xffff not 0xfffff for a 16 bit port constant | Jonathan Gray |
2015-08-21 | Switch iked to C99-style fixed-width integer types. | Reyk Floeter |
2015-08-19 | Add missing OpenBSD CVS tag - no binary change | Reyk Floeter |
2015-08-19 | spacing (no binary change, verified with checksums) | Reyk Floeter |
2015-07-17 | Assign correct destination port value for the destination netmask. | Mike Belopuhov |
2015-07-14 | clarification from trondd; | Jason McIntyre |
2015-07-07 | repair policy-ikesa-linking by replacing the broken RB_TREE w/TAILQ | Markus Friedl |
2015-07-03 | Terminate 'config' keyword array with a NULL element. | Mike Belopuhov |
2015-06-11 | Use "compliant" header guards by avoiding the reserved '_' namespace. | Reyk Floeter |
2015-06-05 | Fix coupling and decoupling operations. | vgross |
2015-06-03 | Do not assume that asprintf() clears the pointer on failure, which | Todd C. Miller |
2015-03-26 | initial support for RFC 7427 signatures, so we are no longer | Markus Friedl |
2015-02-28 | Reduce usage of predefined strings in manpages. | Anthony J. Bentley |
2015-02-15 | convert bcmp to memcmp | Ted Unangst |
2015-02-08 | Use AI_ADDRCONFIG when resolv hosts on startup. | Reyk Floeter |
2015-02-06 | unneeded getopt.h | Theo de Raadt |
2015-01-19 | Remove unnecessary <netinet/ip_ipsp.h> includes | Mike Belopuhov |
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
2015-01-15 | tell the truth about DES. | Igor Sobrado |