Age | Commit message (Expand) | Author |
2007-02-19 | do not display empty authkey/enckey line when -k option is not | Hans-Joerg Hoexer |
2007-01-10 | add -k to usage(); | Jason McIntyre |
2007-01-03 | do not print secret keys by default, -k restores old behaviour; ok hshoexer | Markus Friedl |
2006-11-30 | handle multiple SAs with different same src/dst but different port; | Markus Friedl |
2006-11-10 | When using -vv, also show grouped SAs. | Hans-Joerg Hoexer |
2006-11-01 | KNF unrelated to previous commit. | Ryan Thomas McBride |
2006-11-01 | Add support for aggressive mode (from the k2k6 IPsec hackathon). | Ryan Thomas McBride |
2006-09-19 | sort SAs by spi; ok hshoexer | Markus Friedl |
2006-08-31 | Security Association Database is abbreviated 'SAD' (RFC 2401 et al), not 'SAD... | Hakan Olsson |
2006-06-08 | fix usage, make synopsis more pretty. noticed by david@ | Hans-Joerg Hoexer |
2006-06-02 | exit(2) when loading of rules did work partially. ok markus@ | Hans-Joerg Hoexer |
2006-06-02 | add trailing \ when printing multiple lines for an SA, this way | Markus Friedl |
2006-06-02 | allow to specify phase 1 and 2 lifetimes. Right now, these values | Hans-Joerg Hoexer |
2006-06-01 | Support flows with port modifiers for proto tcp/udp, e.g. | Christian Weisgerber |
2006-06-01 | more to free, needed for SA grouping. | Hans-Joerg Hoexer |
2006-06-01 | convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumping | Markus Friedl |
2006-06-01 | Prepare for SA grouping. | Hans-Joerg Hoexer |
2006-06-01 | correct error messages to match calloc where appropriate | Todd T. Fries |
2006-06-01 | rename list link for ipsec_rule structures from "entries" to "rule_entry". | Hans-Joerg Hoexer |
2006-05-30 | implement monitor mode for ipsecctl. worked on with markus@ | Mathieu Sauve-Frankel |
2006-05-29 | add ipsecctl_free_rule() for cleaning up rules. | Hans-Joerg Hoexer |
2006-03-31 | wenn dumping rules always show type, srcid and dstid (if set). | Hans-Joerg Hoexer |
2006-03-31 | allow specification of encapsulated protocol for flows; ok hshoexer | Markus Friedl |
2006-03-30 | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok hs... | Markus Friedl |
2006-03-22 | add support for macros in ipsec.conf(5). some bits have already been | Reyk Floeter |
2006-02-01 | noted by lint: include <string.h> instead of <strings.h>, add tow ARGSUSED1 | Hans-Joerg Hoexer |
2006-01-17 | wrap long lines (no binary change) | Reyk Floeter |
2006-01-16 | add support for pre-shared keys with "ike esp" using the new keyword | Reyk Floeter |
2005-12-06 | more appropriate error messages; ok hshoexer | Markus Friedl |
2005-12-06 | ipip support: ip-in-ip w/o gif(4); ok hshoexer | Markus Friedl |
2005-12-01 | do not choke and dump core when printing bypass flows. noticed by jacob | Hans-Joerg Hoexer |
2005-11-30 | handle that pfkey_ipsec_flush() can fail. | Hans-Joerg Hoexer |
2005-11-21 | Fix memory leaks. From Andrey Matveev <evol at online dot ptt dot ru>, | Hans-Joerg Hoexer |
2005-11-13 | fclose() file descriptor of the rule file when we are done with it. | Hans-Joerg Hoexer |
2005-11-12 | spacing | Theo de Raadt |
2005-11-12 | handle transport/tunnel mode | Hans-Joerg Hoexer |
2005-11-06 | Improved address and address mask handling, derived from pfctl stuff. | Hans-Joerg Hoexer |
2005-11-06 | better handling of ip addresses, prepare for v6. Partially derived from diff | Hans-Joerg Hoexer |
2005-10-30 | add support for ipcomp. | Hans-Joerg Hoexer |
2005-10-28 | more error message cleanup | Hans-Joerg Hoexer |
2005-10-16 | cleanup messages generated by err(3) | Hans-Joerg Hoexer |
2005-08-22 | Teach ipsecctl to control isakmpd. | Hans-Joerg Hoexer |
2005-08-09 | Rewrite handling of transforms. Now both ah and esp can be specified and | Hans-Joerg Hoexer |
2005-08-08 | add crypto transforms and static keying rules | Hans-Joerg Hoexer |
2005-08-08 | prepare for static keying | Hans-Joerg Hoexer |
2005-08-05 | prepare for authentication and encryption keys, not used yet. | Hans-Joerg Hoexer |
2005-08-03 | be more careful when using struct ipsec_auth, might be NULL now. | Hans-Joerg Hoexer |
2005-08-02 | Make use of struct ipsec_auth dynamic. | Hans-Joerg Hoexer |
2005-07-24 | prepare for combining SAs and flows in one single rule, no functional change | Hans-Joerg Hoexer |
2005-07-09 | it's ok to not specify the key when deleting a tcpmd5 SA | Hans-Joerg Hoexer |