src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-10-21	Remove SAs from ike_dstid_sas on 'ikectl reset sa' to prevent use after free.	tobhe
2020-10-19	Handle NO_PROPOSAL_CHOSEN as IKE_AUTH initiator.	tobhe
2020-10-09	More unused headers.	tobhe
2020-10-09	Remove unused "wait.h" includes.	tobhe
2020-10-06	Always allocate hash_keylength() for buffers passed to hash_final() to	tobhe
2020-10-05	Only handle AUTHENTICATION_FAILED for IKE_AUTH and INFORMATIONAL exchanges.	tobhe
2020-10-03	React to DELETE notifications only in INFORMATIONAL messages	tobhe
2020-10-02	Send AUTH_FAILED in ikev2_ike_auth_recv() if the message did not contain	tobhe
2020-10-01	Skip DELETE payload responses only after they are validated.	tobhe
2020-09-30	Don't accept AUTH payloads with invalid auth_method 0.	tobhe
2020-09-30	Don't accept ID payloads with ID type IKEV2_ID_NONE.	tobhe
2020-09-30	Don't leak sa->sa_peerauth.id_buf.	tobhe
2020-09-29	Check ibuf_seek() return value.	tobhe
2020-09-26	Cleanup msg_eap in ikev2_msg_cleanup().	tobhe
2020-09-25	Simplify RB_TREE cleanup loops.	tobhe
2020-09-24	Cleanup logging, print SPIs where it makes sense.	tobhe
2020-09-23	Add new 'set cert_partial_chain' config option to allow verification of	tobhe
2020-09-21	Fix reassembly of out-of-order fragments. Always take the nextpld field	tobhe
2020-09-19	Add SHA2_384 and SHA2_512 to default proposals.	tobhe
2020-09-18	Fix memory leak in 'n->name'.	tobhe
2020-09-17	Set retransmit timeout for DELETE message on the replaced SA, not on	tobhe
2020-09-17	Do not send DELETE messages for closing SAs.	tobhe
2020-09-17	Merge IKEV2_EXCHANGE_CREATE_CHILD_SA and IKEV2_EXCHANGE_INFORMATIONAL	tobhe
2020-09-16	Move all the EAP logic from a single branch in the message parsing code to	tobhe
2020-09-16	Fix EAP authentication if the initiator sends no certificate	tobhe
2020-09-09	Delete dead code.	tobhe
2020-09-08	Fix auth method negotiation for IKEV2_CERT_X509_CERT. If a cert matching	tobhe
2020-09-06	Drop redundant else for readability.	tobhe
2020-09-05	Use peer from policy, not from the acquire message.	tobhe
2020-09-05	Initialize flow_dir and flow_saproto so policy_test() can find the policy	tobhe
2020-09-04	INFORMATIONAL and CREATE_CHILD_SA exchanges cannot be initiated at the	tobhe
2020-09-03	Log OCSP url on connection failure.	tobhe
2020-09-02	Add 30s timeout for OCSP requests.	tobhe
2020-09-01	Log SPIs to make it easier to map OCSP messages to SAs.	tobhe
2020-09-01	Make OCSP response status logging less verbose.	tobhe
2020-08-31	Do not register a read/write callback on fd -1 (e.g. if connection failed).	tobhe
2020-08-31	Both ocsp_req_ctx and ocsp_req must be freed. Don't free ocsp_id as it	tobhe
2020-08-31	Use SA header (SPIs) to map OCSP connect requests to their respective	tobhe
2020-08-28	Rename ikev2_*_sa() functions to make clear they handle Child SAs.	tobhe
2020-08-27	Make sure to save certificate in the CERTINVALID case to fix	tobhe
2020-08-26	Allow disabling DPD liveness checks by setting dpd_check_interval to 0.	tobhe
2020-08-25	Fix undefined symbol.	tobhe
2020-08-25	Add dpd_check_interval configuration option. If for any IKE SA no IPsec	tobhe
2020-08-24	Reduce the amount of boilerplate code and imsgs for config options by	tobhe
2020-08-23	Add a new configuration option to limit the number of connections for	tobhe
2020-08-23	Rename natt_mode to sc_nattmode for consistency.	tobhe
2020-08-22	Prevent concurrent CREATE_CHILD_SA and INFORMATIONAL exchanges.	tobhe
2020-08-21	Use trusted CA from /etc/iked/ca/ as OCSP issuer to get rid of	tobhe
2020-08-20	Remove redundant variable.	tobhe
2020-08-19	Restructure traffic selector payload parsing. Add additional size and	tobhe