summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl/ipsecctl.c
AgeCommit message (Collapse)Author
2007-10-13in all these programs using the same pfctl-derived parse.y, re-unify theTheo de Raadt
yylex implementation and the code which interacts with yylex. this also brings the future potential for include support to all of the parsers. in the future please do not silly modifications to one of these files without checking if you are de-unifying the code. checked by developers in all these areas.
2007-08-21no need to include both sys/types.h and params.hHans-Joerg Hoexer
2007-02-19do not display empty authkey/enckey line when -k option is notHans-Joerg Hoexer
specified. ok markus@
2007-01-10add -k to usage();Jason McIntyre
2007-01-03do not print secret keys by default, -k restores old behaviour; ok hshoexerMarkus Friedl
2006-11-30handle multiple SAs with different same src/dst but different port;Markus Friedl
store IKE connection string and phase2 IDs in the ipsec rule; cleanup internal API: pass rules around instead of rule members; report Brian Candler; fix with hshoexer, msf; ok hshoexer
2006-11-10When using -vv, also show grouped SAs.Hans-Joerg Hoexer
2006-11-01KNF unrelated to previous commit.Ryan Thomas McBride
2006-11-01Add support for aggressive mode (from the k2k6 IPsec hackathon).Ryan Thomas McBride
ok hshoexer
2006-09-19sort SAs by spi; ok hshoexerMarkus Friedl
2006-08-31Security Association Database is abbreviated 'SAD' (RFC 2401 et al), not ↵Hakan Olsson
'SADB'. jmc@, hshoexer@ ok.
2006-06-08fix usage, make synopsis more pretty. noticed by david@Hans-Joerg Hoexer
2006-06-02exit(2) when loading of rules did work partially. ok markus@Hans-Joerg Hoexer
2006-06-02add trailing \ when printing multiple lines for an SA, this wayMarkus Friedl
the output of ispecctl matches its input
2006-06-02allow to specify phase 1 and 2 lifetimes. Right now, these valuesHans-Joerg Hoexer
can only be set globally (ie. Default-phase-[12]-lifetime).
2006-06-01Support flows with port modifiers for proto tcp/udp, e.g.Christian Weisgerber
flow proto udp from 1.2.3.4 port ntp to 5.6.7.8 ok hshoexer@ msf@
2006-06-01more to free, needed for SA grouping.Hans-Joerg Hoexer
2006-06-01convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumpingMarkus Friedl
the in-kernel SAs. this way we produce the same output as rule loading ok hshoexer
2006-06-01Prepare for SA grouping.Hans-Joerg Hoexer
2006-06-01correct error messages to match calloc where appropriateTodd T. Fries
ok hshoexer@
2006-06-01rename list link for ipsec_rule structures from "entries" to "rule_entry".Hans-Joerg Hoexer
2006-05-30implement monitor mode for ipsecctl. worked on with markus@Mathieu Sauve-Frankel
ok hshoexer@
2006-05-29add ipsecctl_free_rule() for cleaning up rules.Hans-Joerg Hoexer
2006-03-31wenn dumping rules always show type, srcid and dstid (if set).Hans-Joerg Hoexer
ok reyk@
2006-03-31allow specification of encapsulated protocol for flows; ok hshoexerMarkus Friedl
2006-03-30allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok ↵Markus Friedl
hshoexer, reyk
2006-03-22add support for macros in ipsec.conf(5). some bits have already beenReyk Floeter
there. requested by david@ ok hshoexer@, msf@
2006-02-01noted by lint: include <string.h> instead of <strings.h>, add tow ARGSUSED1Hans-Joerg Hoexer
2006-01-17wrap long lines (no binary change)Reyk Floeter
2006-01-16add support for pre-shared keys with "ike esp" using the new keywordReyk Floeter
"psk". rsa-sig is recommended and will still be used by default. ok hshoexer@, manpage ok jmc@
2005-12-06more appropriate error messages; ok hshoexerMarkus Friedl
2005-12-06ipip support: ip-in-ip w/o gif(4); ok hshoexerMarkus Friedl
2005-12-01do not choke and dump core when printing bypass flows. noticed by jacobHans-Joerg Hoexer
schlyter. Thanks!
2005-11-30handle that pfkey_ipsec_flush() can fail.Hans-Joerg Hoexer
2005-11-21Fix memory leaks. From Andrey Matveev <evol at online dot ptt dot ru>,Hans-Joerg Hoexer
thanks!
2005-11-13fclose() file descriptor of the rule file when we are done with it.Hans-Joerg Hoexer
From David Hill <dhill at mindcry dot org>, thanks!
2005-11-12spacingTheo de Raadt
2005-11-12handle transport/tunnel modeHans-Joerg Hoexer
2005-11-06Improved address and address mask handling, derived from pfctl stuff.Hans-Joerg Hoexer
2005-11-06better handling of ip addresses, prepare for v6. Partially derived from diffHans-Joerg Hoexer
by todd@. Work in progress.
2005-10-30add support for ipcomp.Hans-Joerg Hoexer
2005-10-28more error message cleanupHans-Joerg Hoexer
2005-10-16cleanup messages generated by err(3)Hans-Joerg Hoexer
2005-08-22Teach ipsecctl to control isakmpd.Hans-Joerg Hoexer
ok deraadt
2005-08-09Rewrite handling of transforms. Now both ah and esp can be specified andHans-Joerg Hoexer
validated correctly. Unbreaks ah.
2005-08-08add crypto transforms and static keying rulesHans-Joerg Hoexer
2005-08-08prepare for static keyingHans-Joerg Hoexer
2005-08-05prepare for authentication and encryption keys, not used yet.Hans-Joerg Hoexer
2005-08-03be more careful when using struct ipsec_auth, might be NULL now.Hans-Joerg Hoexer
2005-08-02Make use of struct ipsec_auth dynamic.Hans-Joerg Hoexer
Do not pass IDs to kernel when deleting flows.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-09 10:36:10 +0000