| Age | Commit message (Expand) | Author |
|---|
| 2023-03-07 | Delete obsolete /* ARGSUSED1 */ lint comments. | Philip Guenther |
| 2021-10-22 | After deleting hifn(4) the only provider for the LZS compression | Alexander Bluhm |
| 2021-07-14 | Export SA replay counters via pfkey and print with ipsecctl. | tobhe |
| 2021-07-05 | Print SA MTU if included in pfkey message. | tobhe |
| 2020-11-05 | Enable support for ASN1_DN ipsec identifiers. | Peter Hessler |
| 2020-06-01 | Fix "comparison of integers of different signs" warning. | tobhe |
| 2020-04-23 | Support SADB_X_EXT_RDOMAIN extension in pfkey dump (-m). | tobhe |
| 2019-07-03 | snprintf/vsnprintf return < 0 on error, rather than -1. | Theo de Raadt |
| 2018-08-28 | Display per-TDB counters in verbose mode. | Martin Pieuchot |
| 2018-07-10 | Include <sys/queue.h> instead of relying on kernel headers to include | Martin Pieuchot |
| 2017-04-19 | Rename all SA groups to bundles consistently. The first kernel | Alexander Bluhm |
| 2017-04-10 | Found another len += snprintf... | Theo de Raadt |
| 2017-03-02 | Now that the kernel provides information about IPsec SA bundles, | Alexander Bluhm |
| 2017-02-28 | Depending on the addresses, ipsecctl(8) automatically groups sa | Alexander Bluhm |
| 2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
| 2015-12-02 | remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@ | Christian Weisgerber |
| 2015-11-04 | Decode Chacha20-Poly1305 when dumping SAs; ok reyk, naddy | Mike Belopuhov |
| 2015-04-17 | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | Mike Belopuhov |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2014-12-28 | Unbreak the tree. Looks like tedu did not tedu enough when killing KPDK | Claudio Jeker |
| 2014-01-22 | fix printing of IPcomp SAs; ok mikeb@ & todd@ | Markus Friedl |
| 2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | Markus Friedl |
| 2012-07-05 | don't output "esn" string in the rule section as we can't use the | Mike Belopuhov |
| 2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | Christian Weisgerber |
| 2012-06-29 | Print esn flag when dumping SAs with ESN enabled | Mike Belopuhov |
| 2011-04-13 | print flags in hex; from hshoexer@; ok mikeb@ mpf@ | Markus Friedl |
| 2010-10-06 | Retire Skipjack | Mike Belopuhov |
| 2010-09-22 | Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC | Mike Belopuhov |
| 2010-07-01 | support dumping the new SADB_X_EXT_TAP extension. | Reyk Floeter |
| 2009-11-13 | Don't use [] in function arguments when dealing with arrays | Jonathan Gray |
| 2008-08-19 | use the actual keysize from the SA to figure out which AES variant | Markus Friedl |
| 2007-01-03 | do not print secret keys by default, -k restores old behaviour; ok hshoexer | Markus Friedl |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2006-09-19 | sort SAs by spi; ok hshoexer | Markus Friedl |
| 2006-08-30 | partial backout of last commit | Markus Friedl |
| 2006-08-30 | print extensions with type SADB_EXT_MAX, too; ok hshoexer, reyk, msf | Markus Friedl |
| 2006-06-12 | Fix a typo that prevented ipsecctl -ss from showing authentication | Christian Weisgerber |
| 2006-06-02 | print full information about tcpmd5 and ipcomp SAs, too | Markus Friedl |
| 2006-06-02 | tiny style cleanup and white spaces | Hans-Joerg Hoexer |
| 2006-06-02 | fix the formatting for sadb_register messages in monitor mode. | Mathieu Sauve-Frankel |
| 2006-06-01 | convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumping | Markus Friedl |
| 2006-06-01 | spacing | Theo de Raadt |
| 2006-05-31 | whitespace cleanup | Hans-Joerg Hoexer |
| 2006-05-31 | shuffle some newlines to make all the formatting work again | Mathieu Sauve-Frankel |
| 2006-05-30 | implement monitor mode for ipsecctl. worked on with markus@ | Mathieu Sauve-Frankel |
| 2005-12-21 | Userland programs should include <errno.h> not <sys/errno.h> | Todd C. Miller |
| 2005-12-12 | use ARGSUSED1 here | Hans-Joerg Hoexer |
| 2005-11-13 | spacing | Theo de Raadt |
| 2005-11-12 | handle transport/tunnel mode | Hans-Joerg Hoexer |
