| Age | Commit message (Expand) | Author |
|---|
| 2018-04-17 | Document how to avoid isakmpd(8) source IP address pitfalls by using | Stefan Sperling |
| 2017-11-23 | in isakmpd(8), provide a hint: from scott cheloha | Jason McIntyre |
| 2017-10-27 | Support DH groups 19 to 21 and 25 to 30, just like iked(8) does. | Martin Pieuchot |
| 2017-04-14 | Up to now ipsecctl(8) grouped SAs with identical src and dst to the | Alexander Bluhm |
| 2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
| 2015-11-01 | replace "can not" with "cannot"; | Jason McIntyre |
| 2015-05-25 | bump up the default Diffie-Hellman group to modp3072; ok mikeb@ djm@ | Christian Weisgerber |
| 2015-02-28 | Reduce usage of predefined strings in manpages. | Anthony J. Bentley |
| 2015-01-10 | tell the truth about DES. | Igor Sobrado |
| 2015-01-02 | PFS stands for Perfect Forward Secrecy. | Igor Sobrado |
| 2014-03-19 | Unify ipsec.conf(5)'s copy of the text dealing with multiline comments, | Stuart Henderson |
| 2013-11-01 | altq -> new queue in examples | Henning Brauer |
| 2013-06-29 | do not use Sx for sections outwith the page; | Jason McIntyre |
| 2012-08-12 | Explicitly state that only two unit specifiers are recognized instead of | Lawrence Teo |
| 2012-07-13 | small tweak; | Jason McIntyre |
| 2012-07-13 | Change the configuration format fed to the isakmpd FIFO to be able | Mike Belopuhov |
| 2012-07-08 | Disallow manual security associations that use AES-CTR, AES-GCM, | Christian Weisgerber |
| 2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | Christian Weisgerber |
| 2012-04-24 | take a stab at documenting when arguments need quoted, and valid macro | Jason McIntyre |
| 2011-11-13 | provide a specific section reference; from Lawrence Teo | Jason McIntyre |
| 2011-09-03 | make -column lists pretty again; | Jason McIntyre |
| 2011-08-19 | as with other list types, column lists generally do not need a Pp/-compact | Jason McIntyre |
| 2011-07-07 | We can mention ipcomp, since it works | Theo de Raadt |
| 2011-06-24 | wrap previous onto a second line | Stuart Henderson |
| 2011-06-24 | nat-to rules require a direction | Stuart Henderson |
| 2010-10-06 | Retire Skipjack | Mike Belopuhov |
| 2010-09-23 | change description for AES-GMAC a bit. | Mike Belopuhov |
| 2010-09-22 | Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC | Mike Belopuhov |
| 2010-09-19 | more wacky macro fixing; | Jason McIntyre |
| 2010-06-07 | fix a quoting wobble for the srcnat keyword; verified by reyk | Jason McIntyre |
| 2010-06-03 | update the manpages for isakmpd(8) and ipsec.conf(5) to point to iked(8) | Reyk Floeter |
| 2010-01-02 | Various syntax errors in list headers, found by mandoc(1), | Ingo Schwarze |
| 2009-10-21 | nat -> match...nat-to in example PF rule. ok mpf@ | Stuart Henderson |
| 2009-01-29 | tweak previous; | Jason McIntyre |
| 2009-01-28 | Allow to specify ike and flow explicitly without peer. The any | Alexander Bluhm |
| 2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a | Marco Pfatschbacher |
| 2008-11-29 | Explain how /32 changes the address type to IPV4_ADDR_SUBNET. From Mitja | Hans-Joerg Hoexer |
| 2008-04-11 | add support for the "include" directive using code from pfctl/parse.y. | Reyk Floeter |
| 2008-02-22 | Support for specifying aes-{128,192,256}. Originial idea by Prabhu | Hans-Joerg Hoexer |
| 2008-02-12 | document modifier types; requested by Aurelien | Jason McIntyre |
| 2007-09-17 | Document the syntax used with manual SAs for automatic creation | Stuart Henderson |
| 2007-05-31 | convert to new .Dd format; | Jason McIntyre |
| 2007-03-06 | Explain, why aesctr has 160 bit keys (128 bit aes key + 32 bit nonce). | Hans-Joerg Hoexer |
| 2007-02-19 | tweak; | Jason McIntyre |
| 2007-02-19 | Document NULL encryption. | Hans-Joerg Hoexer |
| 2007-02-16 | Address PR 5380: refer to DH MODP well-known group numbers. | Chad Loder |
| 2006-12-12 | a rewrite of enc.4, hopefully a little more useful than what we previously | Jason McIntyre |
| 2006-12-06 | SAD -> SADB; ok hshoexer | Jason McIntyre |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2006-11-13 | briefly describe phases 1 and 2, and use these terms more | Jason McIntyre |
