summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl/parse.y
AgeCommit message (Expand)Author
2018-11-07sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@miko
2018-11-01- odd condition/test in PF lexerAlexandr Nedvedicky
2018-07-11Do for most running out of memory err() what was done for most runningKenneth R Westerback
2018-07-09No need to mention which memory allocation entry point failed (malloc,Kenneth R Westerback
2018-07-08Be consistent in warn() and log_warn() usage whenKenneth R Westerback
2018-04-26Plug leak in error case of the common 'varset' implementations.Kenneth R Westerback
2017-10-27Support DH groups 19 to 21 and 25 to 30, just like iked(8) does.Martin Pieuchot
2017-04-19Rename all SA groups to bundles consistently. The first kernelAlexander Bluhm
2017-04-14Up to now ipsecctl(8) grouped SAs with identical src and dst to theAlexander Bluhm
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
2016-06-21do not allow whitespace in macro names, i.e. "this is" = "a variable".Sebastian Benoit
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-11-04Decode Chacha20-Poly1305 when dumping SAs; ok reyk, naddyMike Belopuhov
2015-06-03Do not assume that asprintf() clears the pointer on failure, whichTodd C. Miller
2014-11-20Don't allow embedded nul characters in strings.Jonathan Gray
2014-11-04Add gcc format attributes to ipsecctl's parse.y. Also, fix a few formatDoug Hogan
2014-01-22relax the cfg file secrecy check slightly to allow group readabilityHenning Brauer
2013-11-25use u_char for buffers in yylex, for ctype callsSebastian Benoit
2013-11-22Whole bunch of (unsigned char) casts carefully added for ctype calls.Theo de Raadt
2012-07-10Rename "life" to "lifetime" to match iked.Lawrence Teo
2012-07-08Disallow manual security associations that use AES-CTR, AES-GCM,Christian Weisgerber
2012-07-07copy&paste mistake in error messageChristian Weisgerber
2012-06-30enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPChristian Weisgerber
2011-12-20unsigned long should use "%lu" format; from eric lax, thanksMike Belopuhov
2011-07-06For non-crypted flows (such as ipcomp and ipip), default theirTheo de Raadt
2010-10-06Retire SkipjackMike Belopuhov
2010-09-22Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMACMike Belopuhov
2010-08-03fix linecount bug with comments spanning multiple linesHenning Brauer
2010-05-10Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' ->Kenneth R Westerback
2009-08-04Specify an ID-type of IPV4_ADDR or IPV6_ADDR if the srcid or dstid isJoel Sing
2009-03-31Fixed memory leaks which would occur if the second of two memoryTobias Stoeckmann
2009-01-30If the "peer" address is not specified or derived from "to" forAlexander Bluhm
2009-01-29After checking that peer == NULL do not assign peer = NULL a fewAlexander Bluhm
2009-01-28Allow to specify ike and flow explicitly without peer. The anyAlexander Bluhm
2009-01-20Add support to isakmpd(8) and ipsecctl(8) to install SA's with aMarco Pfatschbacher
2008-11-14When parsing v4 addresses mark them as network addressesHans-Joerg Hoexer
2008-10-17findeol() fix from pfctlHenning Brauer
2008-07-01If a rules contains a hostname instead of an address, use the listAlexander Bluhm
2008-07-01If multiple to addresses but no peer are given in an ike or flowAlexander Bluhm
2008-06-14Move ike and flow peer selection to common function.Alexander Bluhm
2008-06-11trivial code simplificationAlexander Bluhm
2008-04-11add support for the "include" directive using code from pfctl/parse.y.Reyk Floeter
2008-02-22Support for specifying aes-{128,192,256}. Originial idea by PrabhuHans-Joerg Hoexer
2007-11-12Remove space/tab compression function from lgetc() and replaceMarco Pfatschbacher
2007-10-22sync with daemon parser code.Pierre-Yves Ritschard
2007-10-16Allow '=' to end a number in all lexers.Marco Pfatschbacher
2007-10-16in the lex... even inside quotes, a \ followed by space or tab shouldTheo de Raadt
2007-10-13in all these programs using the same pfctl-derived parse.y, re-unify theTheo de Raadt
2007-10-11next step in the yylex unification: handle quoted strings in a nicer fashionTheo de Raadt
2007-09-12Here too: Add support to the lex for parsing number out of the stream.Hans-Joerg Hoexer