summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl/pfkdump.c
AgeCommit message (Expand)Author
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-12-02remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@Christian Weisgerber
2015-11-04Decode Chacha20-Poly1305 when dumping SAs; ok reyk, naddyMike Belopuhov
2015-04-17Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexerMike Belopuhov
2015-04-14Remove support for storing credentials and auth information in the kernel.Mike Belopuhov
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2014-12-28Unbreak the tree. Looks like tedu did not tedu enough when killing KPDKClaudio Jeker
2014-01-22fix printing of IPcomp SAs; ok mikeb@ & todd@Markus Friedl
2012-09-18remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not setMarkus Friedl
2012-07-05don't output "esn" string in the rule section as we can't use theMike Belopuhov
2012-06-30enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPChristian Weisgerber
2012-06-29Print esn flag when dumping SAs with ESN enabledMike Belopuhov
2011-04-13print flags in hex; from hshoexer@; ok mikeb@ mpf@Markus Friedl
2010-10-06Retire SkipjackMike Belopuhov
2010-09-22Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMACMike Belopuhov
2010-07-01support dumping the new SADB_X_EXT_TAP extension.Reyk Floeter
2009-11-13Don't use [] in function arguments when dealing with arraysJonathan Gray
2008-08-19use the actual keysize from the SA to figure out which AES variantMarkus Friedl
2007-01-03do not print secret keys by default, -k restores old behaviour; ok hshoexerMarkus Friedl
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2006-09-19sort SAs by spi; ok hshoexerMarkus Friedl
2006-08-30partial backout of last commitMarkus Friedl
2006-08-30print extensions with type SADB_EXT_MAX, too; ok hshoexer, reyk, msfMarkus Friedl
2006-06-12Fix a typo that prevented ipsecctl -ss from showing authenticationChristian Weisgerber
2006-06-02print full information about tcpmd5 and ipcomp SAs, tooMarkus Friedl
2006-06-02tiny style cleanup and white spacesHans-Joerg Hoexer
2006-06-02fix the formatting for sadb_register messages in monitor mode.Mathieu Sauve-Frankel
2006-06-01convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumpingMarkus Friedl
2006-06-01spacingTheo de Raadt
2006-05-31whitespace cleanupHans-Joerg Hoexer
2006-05-31shuffle some newlines to make all the formatting work againMathieu Sauve-Frankel
2006-05-30implement monitor mode for ipsecctl. worked on with markus@Mathieu Sauve-Frankel
2005-12-21Userland programs should include <errno.h> not <sys/errno.h>Todd C. Miller
2005-12-12use ARGSUSED1 hereHans-Joerg Hoexer
2005-11-13spacingTheo de Raadt
2005-11-12handle transport/tunnel modeHans-Joerg Hoexer
2005-10-30add support for ipcomp.Hans-Joerg Hoexer
2005-07-09make sure, output of -ss is identical to syntax for SA rulesHans-Joerg Hoexer
2005-06-27improve output for SAsHans-Joerg Hoexer
2005-06-06parse local/remote credential payload types.Hans-Joerg Hoexer
2005-05-27remove unused tableHans-Joerg Hoexer
2005-05-27Support for dumping the SADB.Hans-Joerg Hoexer