src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-06-26	Replace SIMPLEQ concatenation loop with SIMPLEQ_CONCAT	bket
2020-06-25	Silence ca_validate_pubkey() error message for cert type	tobhe
2020-06-25	Rework 'ikeauth' configuration option. The key and cert checks in the config	tobhe
2020-06-18	Fix handling of short EAP-MSCHAP messages.	tobhe
2020-06-17	Fix length check in ca_getreq().	tobhe
2020-06-15	Log errors with log_info and SPI prepended.	tobhe
2020-06-09	Move AUTH_REQUEST SA state change from parser to IKE_AUTH exchange handler.	tobhe
2020-06-05	Add default proposals for AES-GCM ciphers in IKE and ESP.	tobhe
2020-06-03	Pass sockaddr instead of sockaddr_storage to sa_address.	tobhe
2020-06-02	Don't leak authmsg.	tobhe
2020-05-30	Indentation style(9).	tobhe
2020-05-28	Move duplicate SA negotiation code to ikev2_sa_negotiate_common().	tobhe
2020-05-26	Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.	tobhe
2020-05-14	Stricter return value checking for EVP_Cipher* calls.	tobhe
2020-05-13	Remove unnecessary logging messages.	tobhe
2020-05-13	Remove dead 'iked_flow' member 'flow_type'.	tobhe
2020-05-11	Fix policy lookup edge case for simultaneous transport and tunnel mode SAs.	tobhe
2020-05-09	Log error notifications other than NO_PROPOSAL_CHOSEN	tobhe
2020-05-08	Remove unneccessary X509_NAME_oneline wrapper. Passing NULL as buf	tobhe
2020-05-02	Use gettimeofday() instead of CLOCK_MONOTONIC in gettime(). The return value	tobhe
2020-05-01	When initiating IKE SA rekeying, make sure to send a key from a mutual	tobhe
2020-05-01	Clarify global 'set active' and 'set passive' options and how they	tobhe
2020-04-30	Add ECDH groups and higher order MODP DH groups to default proposal.	tobhe
2020-04-29	Remove trailing tab	tobhe
2020-04-29	Missing whitespace.	tobhe
2020-04-28	The order of arguments to proposals_negotiate makes a difference.	tobhe
2020-04-28	Remove support for insecure EC2N groups. Clarify which Diffie-Hellman	tobhe
2020-04-27	Add curve25519 IANA group number.	tobhe
2020-04-27	Log with SPI_SA().	tobhe
2020-04-26	Fix leak of temporary ID ibufs on IKE SA rekey.	tobhe
2020-04-26	Only print valid rdomains. '-1' is used as default value and should	tobhe
2020-04-24	Add some useful log messages for the IKE handshake.	tobhe
2020-04-24	Log INFORMATIONAL messages with LOG_DEBUG. They are rarely useful for	tobhe
2020-04-23	ce examples of "Ar arg Ar arg" with "Ar arg arg" and stop the spread;	Jason McIntyre
2020-04-23	Add support for switching rdomain on IPsec encryption/decryption.	tobhe
2020-04-22	Fix leaks in signature validation.	tobhe
2020-04-22	Log authentication verification failure with "info" priority.	tobhe
2020-04-20	Remove unused 'dsa_cert' variable.	tobhe
2020-04-18	SPI_SA(sa, NULL) already prints a colon.	tobhe
2020-04-17	Log retransmits of sent requests and responses.	tobhe
2020-04-16	Print SPI value of deleted SA.	tobhe
2020-04-15	Remove redundant 'sa == NULL' check.	tobhe
2020-04-14	Print 'ipcomp' in print_policy() if configured.	tobhe
2020-04-13	Try to send a DELETE message if the SA is reset with 'ikectl reset id'.	tobhe
2020-04-12	No need to call lc_idtype(). idstr does not contain a leading type	tobhe
2020-04-12	"could not open public key" is an error and should be log_info.	tobhe
2020-04-11	DELETE payloads are common. Log with log_info instead of log_warnx.	tobhe
2020-04-11	If we haven't received any IKE message from our partner for some	tobhe
2020-04-10	Only make the type part of the idstring lowercase when looking for certs in	tobhe
2020-04-09	Simplify socket creation logic. Normally iked needs two sockets, one	tobhe