| Age | Commit message (Expand) | Author |
|---|
| 2022-03-16 | Make sure contents of vroute messages are aligned properly. | Tobias Heider |
| 2022-03-14 | Improve retransmission of message fragments. RFC 7383 states that loss of | Tobias Heider |
| 2022-02-13 | SKEEYSEED -> SKEYSEED | mbuhl |
| 2022-02-06 | remove please from manual pages | Jonathan Gray |
| 2022-01-28 | When it's the possessive of 'it', it's spelled "its", without the | Philip Guenther |
| 2021-12-23 | fix off by one in bounds test | Jonathan Gray |
| 2021-12-14 | Move raw pubkey bytes to EVP_PKEY conversion to common function. | Tobias Heider |
| 2021-12-13 | Fix asprintf() error check. Portable code should check the return | Theo Buehler |
| 2021-12-13 | Fix a few leaks due to X509_NAME_oneline(name, NULL, 0) dynamically | Theo Buehler |
| 2021-12-13 | Avoid a potential double free in group_free() | Theo Buehler |
| 2021-12-13 | Cleanup libcrypto memory management. Remove redundant NULL checks | Tobias Heider |
| 2021-12-09 | Properly enable NAT-T without udpencap if mobike was negotiated without NAT. | Tobias Heider |
| 2021-12-09 | Move switch to NAT-T port and udpencap activation to ikev2_enable_natt(). | Tobias Heider |
| 2021-12-08 | The /etc/iked/certs/ directory is used for both local and peer | Tobias Heider |
| 2021-12-07 | Fix locally stored peer certificates in /etc/iked/certs as documented in | Tobias Heider |
| 2021-12-06 | Logging received addresses and DNS configuration only makes sense for | Tobias Heider |
| 2021-12-04 | Send out dstid as initiator if configured. This makes it easier for | Tobias Heider |
| 2021-12-01 | whitespace cleanup during review read | Theo de Raadt |
| 2021-11-30 | whitespace | Tobias Heider |
| 2021-11-29 | add -V to usage(), and list it before -v in both SYNOPSIS and the | Jason McIntyre |
| 2021-11-29 | Add command line option to show the version | Tobias Heider |
| 2021-11-29 | sys/param.h was included for MAX(), MIN() and roundup(). make local | Theo de Raadt |
| 2021-11-27 | Rename msg_id to msg_peerid now that we also have msg_localid. | Tobias Heider |
| 2021-11-26 | A peer sends both his local id and remote id he expects us to be. So far we | Patrick Wildt |
| 2021-11-26 | Fix ikev2_child_sa_rekey() warnings. The SPI can't be printed without a | Tobias Heider |
| 2021-11-25 | Remove unused variable fd. | Tobias Heider |
| 2021-11-25 | Silence unitialized variable warnings. | Tobias Heider |
| 2021-11-24 | Unregister event on pfkey socket during pfkey_reply(). Using events | Tobias Heider |
| 2021-11-24 | Pass env to pfkey API. Consistently call pfkey file descriptor fd. | Tobias Heider |
| 2021-11-23 | Add logging for rekey failures. | Tobias Heider |
| 2021-11-22 | MOBIKE is RFC 4555. | Tobias Heider |
| 2021-11-21 | Add 'ikectl show certinfo' to show trusted CAs and certificates. | Tobias Heider |
| 2021-11-20 | Fix some strdup() leaks in ocsp config option. | Tobias Heider |
| 2021-11-19 | Check stdrup() return value. | Tobias Heider |
| 2021-11-18 | iked: replace a conditional EVP_CIPHER_CTX_cleanup() + free() stanza | Theo Buehler |
| 2021-11-18 | Check if encoding works in dsa_init(). This avoids calling fatal() | Tobias Heider |
| 2021-11-16 | Zero all copies of pre-shared key. | Tobias Heider |
| 2021-11-15 | style | Tobias Heider |
| 2021-11-13 | The key/nonce disclaimers were copied from ipsec.conf.5 but aren't relevant | Tobias Heider |
| 2021-11-12 | Refactor order of checks when handling IKEv2 message fragments. | Tobias Heider |
| 2021-11-10 | Look for INVALID_KE group from IKE_SA_INIT in IKE transforms, | Tobias Heider |
| 2021-11-09 | Use more sensible transforms in example config. | Tobias Heider |
| 2021-11-05 | Clarify iface option. | Tobias Heider |
| 2021-11-04 | Clarify "aes" will accept keys which length is in 128:256 bits. Also | YASUOKA Masahiko |
| 2021-10-26 | Make proto config option accept a list to allow specifying multiple | Tobias Heider |
| 2021-10-15 | Don't declare variables as "unsigned char *" that are passed to | Christian Weisgerber |
| 2021-10-12 | Change responder to prefer DH group from KE payload. | Tobias Heider |
| 2021-10-12 | Make sure all copies of MSCHAPv2 passphrase are zeroed after use. | Tobias Heider |
| 2021-09-18 | upon length check or other failure, explicit_bzero an object, because it may | Theo de Raadt |
| 2021-09-18 | freezero() instead of free(), because the object may contain a password | Theo de Raadt |
