Age | Commit message (Expand) | Author |
2016-09-04 | Now that we have IP_SENDSRCADDR, add sendtofrom(). | Vincent Gross |
2016-09-03 | Add the missing bits to have NAT on enc(4) support in iked. | Vincent Gross |
2016-08-06 | Unbreak PSK authentication, broken by previous. | Pascal Stumpf |
2016-07-20 | When parsing the configuration. initialize the auth structure | Reyk Floeter |
2016-06-21 | do not allow whitespace in macro names, i.e. "this is" = "a variable". | Sebastian Benoit |
2016-06-02 | Use the last 32-bits of the IPv6 address to dynamically assign | Patrick Wildt |
2016-06-01 | Implement a second address pool specifically for IPv6, so that | Patrick Wildt |
2016-06-01 | ikev2_cp_fixaddr() is called to replace unspecified (e.g. 0.0.0.0) | Patrick Wildt |
2016-03-07 | http -> https for IETF/IANA URLs in comments | mmcc |
2016-01-27 | fyx typo. s,dynanic,dynamic, | Gleydson Soares |
2015-12-10 | comment typo | mmcc |
2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
2015-12-07 | Add imsg "peerid" to debug messages (only within -DDEBUG). | Reyk Floeter |
2015-12-07 | Sync proc.c, use shorter proc_compose[v]() | Reyk Floeter |
2015-12-07 | sync with vmd | Reyk Floeter |
2015-12-05 | EAGAIN handling for imsg_read. OK henning@ benno@ | Claudio Jeker |
2015-12-02 | remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@ | Christian Weisgerber |
2015-11-23 | Replace socket_set_blockmode() and fcntl(fd, F_SETFL, O_NONBLOCK) calls | Reyk Floeter |
2015-11-22 | Update log.c: change fatal() and fatalx() into variadic functions, | Reyk Floeter |
2015-11-21 | Once again, fix the license text. After many years, we just cannot | Reyk Floeter |
2015-11-21 | Move local logging functions to util.c (which is shared with ikectl), | Reyk Floeter |
2015-11-19 | Simplify all instances of get_string() and get_data() using malloc() and | mmcc |
2015-11-18 | pledge exposed a simple bug: the unprivileged child tried to print the | Reyk Floeter |
2015-11-04 | Support Chacha20-Poly1305 for Child SAs; ok reyk | Mike Belopuhov |
2015-11-01 | replace "can not" with "cannot"; | Jason McIntyre |
2015-10-31 | pasto | Christian Weisgerber |
2015-10-31 | RFC4754 specifies ECDSA-521 (sic), not -512. ok reyk@ | Christian Weisgerber |
2015-10-23 | push LDSTATIC line down so it's not overridden by makefile.inc. ok reyk | Ted Unangst |
2015-10-22 | iked hereby pledges that it will run with restricted system | Reyk Floeter |
2015-10-22 | Stop linking iked -static: It was inherited from isakmpd that is | Reyk Floeter |
2015-10-20 | Fix ocsp by adding a missing TAILQ_INIT(). | Reyk Floeter |
2015-10-19 | break long lines in examples; ok jmc@ | Christian Weisgerber |
2015-10-19 | Fix control_imsg_forward() by changing imsg_compose() to | Reyk Floeter |
2015-10-19 | Remove the ikev1 stub - Since I started iked, it has an empty privsep | Reyk Floeter |
2015-10-15 | Remove some unnecessary NULL-checks before free(). Change two bzero() | mmcc |
2015-10-02 | Curve25519 is now specified in draft-ietf-ipsecme-safecurves-00 (along | Reyk Floeter |
2015-10-02 | RFC7634 specifies ChaCha20-Poly1305 for IKEv2 and IPsec and IANA | Reyk Floeter |
2015-10-02 | Remove MD5 from the default proposals. At least SHA1 seems to be the | Reyk Floeter |
2015-10-02 | If the policy certreqtype is 0, use the global one instead. | Reyk Floeter |
2015-10-01 | Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as | Stuart Henderson |
2015-10-01 | Fix interoperability with Apple iOS9: If we don't get a (valid) | Reyk Floeter |
2015-08-26 | use 0xffff not 0xfffff for a 16 bit port constant | Jonathan Gray |
2015-08-21 | Switch iked to C99-style fixed-width integer types. | Reyk Floeter |
2015-08-19 | Add missing OpenBSD CVS tag - no binary change | Reyk Floeter |
2015-08-19 | spacing (no binary change, verified with checksums) | Reyk Floeter |
2015-07-17 | Assign correct destination port value for the destination netmask. | Mike Belopuhov |
2015-07-14 | clarification from trondd; | Jason McIntyre |
2015-07-07 | repair policy-ikesa-linking by replacing the broken RB_TREE w/TAILQ | Markus Friedl |
2015-07-03 | Terminate 'config' keyword array with a NULL element. | Mike Belopuhov |
2015-06-11 | Use "compliant" header guards by avoiding the reserved '_' namespace. | Reyk Floeter |