summaryrefslogtreecommitdiff
path: root/sbin/ipsecadm/ipsecadm.c
AgeCommit message (Expand)Author
2004-05-23support deletion of tcpmd5 SAs and add regress tests; ok hshoexer, deraadtMarkus Friedl
2004-05-23unbreak ipcomp; report davidkrause; ok hshoexer@Markus Friedl
2004-05-14unbreak, interpret cpi and spi values as hex even if not preceded by 0x.Jason Ish
2004-05-10strtonum conversion and better input checking of integer values; ok deraadt@Jason Ish
2004-05-09de-lintTheo de Raadt
2004-01-27correct address resolution logic via getaddrinfo(3). henning and markus okJun-ichiro itojun Hagino
2004-01-27pass -spi for tcpmd5, too; ok hshoexer@Markus Friedl
2004-01-15support for rfc 2385 tcp md5 'signature' keysMarkus Friedl
2003-12-02UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)Markus Friedl
2003-09-23use getaddrinfo for name-to-address resolution. mcbride@ okJun-ichiro itojun Hagino
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-07-24hmac-sha2-{256,384,512} support in AH/ESP auth. markus okJun-ichiro itojun Hagino
2003-07-02missing protosTheo de Raadt
2003-02-25implement 'show' and 'monitor' commands; ok djm@, deraadt@, cedric@Markus Friedl
2003-02-15skeleton support for LZS compressionJason Wright
2002-07-03ansiTheo de Raadt
2001-12-01KNFTheo de Raadt
2001-08-05re-order headers as they should beTheo de Raadt
2001-07-06Fix unused/uninitialized variables.Angelos D. Keromytis
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-26configure sa_family on mask too. to preserve older practiceJun-ichiro itojun Hagino
2001-06-26allow -addr src/prefixlen dst/prefixlen. discussed with angelos.Jun-ichiro itojun Hagino
2001-06-25Copyright update.Angelos D. Keromytis
2001-06-08Set SADB_X_POLICYFLAGS_POLICY for flows we add/delete.Angelos D. Keromytis
2001-06-05Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwardsNiklas Hallqvist
2001-05-30MBOX->USERFQDNAngelos D. Keromytis
2001-04-19PF_KEY identity extensions are NUL-terminated. Do not forget neither toNiklas Hallqvist
2001-03-28Fix range checking on SPIs (Jean-Jacques.Bernard@hsc.fr)Angelos D. Keromytis
2001-03-22Allow srcid/dstid for manually-set SAs as well (mostly for debugAngelos D. Keromytis
2001-03-08whack exit(-#)Theo de Raadt
2000-11-17*HMAC96->*HMACAngelos D. Keromytis
2000-10-25typo; deraadt okJason Wright
2000-10-18Destination address is not needed for flows.Angelos D. Keromytis
2000-10-16getserv* already returns ports in network byteorderNiklas Hallqvist
2000-10-09AES.Angelos D. Keromytis
2000-09-29Update for no -spi use with flowAngelos D. Keromytis
2000-09-21Send correct lengths for srcid/dstid.Angelos D. Keromytis
2000-09-21Allocate memory for srcid/dstid.Angelos D. Keromytis
2000-09-20srcid/dstid/srcid_type/dstid_type flags for flows.Angelos D. Keromytis
2000-09-19Re-add support for SA bundles.Angelos D. Keromytis
2000-09-19Update to use the new framework.Angelos D. Keromytis
2000-05-02Keep track of those offsets in argv[].Hakan Olsson
2000-04-22Remove extra space from usage.Angelos D. Keromytis
2000-04-22Slight clarification in usage.Angelos D. Keromytis
2000-04-22-keyfile/-authkeyfile flags, for reading keys from a file.Angelos D. Keromytis
2000-04-21fix some usage glitchesTheo de Raadt
2000-03-28fix sanity checks to allow authentication-only ESPJason Wright
2000-02-08in6.h is not necessary (in.h will bring it in)Jun-ichiro itojun Hagino
2000-01-27Conform with the new changes with regards to new/old ESP/AHAngelos D. Keromytis
2000-01-13Add -ingress flagAngelos D. Keromytis