summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl
AgeCommit message (Expand)Author
2006-08-31expand DESCRIPTION; input from ho hshoexer naddyJason McIntyre
2006-08-31clarify an .Sh; agreed with hshoexerJason McIntyre
2006-08-30can get EAGAIN when writing to the pfkey socket; same change as bgpd,Henning Brauer
2006-08-30cut down the examples; ok hshoexerJason McIntyre
2006-08-30partial backout of last commitMarkus Friedl
2006-08-30some tcp md5 bits;Jason McIntyre
2006-08-30comment out some comp stuff i missed earlier;Jason McIntyre
2006-08-30better wording for the key generation section;Jason McIntyre
2006-08-30kill more redundant text, and an oops;Jason McIntyre
2006-08-30remove some repeated text, and shuffle a little;Jason McIntyre
2006-08-30one more from ho;Jason McIntyre
2006-08-30correction; from hoJason McIntyre
2006-08-30knock out some redundant text; from hoJason McIntyre
2006-08-30put the PFS stuff in the right place;Jason McIntyre
2006-08-30actually use the right value for USER_FQDNMathieu Sauve-Frankel
2006-08-30print extensions with type SADB_EXT_MAX, too; ok hshoexer, reyk, msfMarkus Friedl
2006-08-30knock out ipcomp for now;Jason McIntyre
2006-08-30put this page into a better structure orderJason McIntyre
2006-08-29add support for ufqdn ids in ike rulesMathieu Sauve-Frankel
2006-08-29Add support for IKE AH rules to ipsecctl. Man page input by jmc@.Christian Weisgerber
2006-07-22corrections from alexey e. suslikov;Jason McIntyre
2006-07-21When no peer is specified, no peer address is defined, thus do not use it.Hans-Joerg Hoexer
2006-06-28document lists, prodded by david@Hans-Joerg Hoexer
2006-06-18add group "none"; when choosen, pfs will be disabled.Hans-Joerg Hoexer
2006-06-16add a missing "force"Hans-Joerg Hoexer
2006-06-16report the correct line number on an error. Noticed by david@Hans-Joerg Hoexer
2006-06-15be careful when touch the peer component of a rule. It is notHans-Joerg Hoexer
2006-06-14recover list of key sizes from vpn(8); suggested by markus@, ok hshoexer@Christian Weisgerber
2006-06-13For IKE, allow main mode SHA2 and quick mode AESCTR transforms,Christian Weisgerber
2006-06-12Fix a typo that prevented ipsecctl -ss from showing authenticationChristian Weisgerber
2006-06-11the default encryption algorithm with static keying is AES-CBC now; ok hshoexer@Christian Weisgerber
2006-06-11As naddy@ pointed out RFC 3686 discourages use of AESCTR for staticHans-Joerg Hoexer
2006-06-11Adopt to recent changes (mopd3072 is not the default anymore).Hans-Joerg Hoexer
2006-06-10Better error message when a key file can not be opened or the provided key isHans-Joerg Hoexer
2006-06-10switch back to original defaults regarding DH groups. modp3072 is toHans-Joerg Hoexer
2006-06-10knf & careful data freeing, regression tested by toddTheo de Raadt
2006-06-09simplify previous;Jason McIntyre
2006-06-08fix usage, make synopsis more pretty. noticed by david@Hans-Joerg Hoexer
2006-06-08fix some indentation, noticed by david@Hans-Joerg Hoexer
2006-06-08Add a transport mode specifier to ike rules. Tunnel mode remains the default.Christian Weisgerber
2006-06-08allocate enough storage via sockaddr_storage for sockaddr_in6,Todd T. Fries
2006-06-08Fix a typo: When testing for quick mode lifetimes, make sure toHans-Joerg Hoexer
2006-06-08turns out this really doesn't break what is in the tree; ok hshoexer@Todd T. Fries
2006-06-07make sure, we initialize unspecified keys and spis. Noticed byHans-Joerg Hoexer
2006-06-07Do not yet expand the "any" keyword to v6 addresses. ok todd@Hans-Joerg Hoexer
2006-06-07remove unused prototype, ok todd@Hans-Joerg Hoexer
2006-06-02correct spelling of specifiedDavid Krause
2006-06-02exit(2) when loading of rules did work partially. ok markus@Hans-Joerg Hoexer
2006-06-02document port modifiers in ike rulesChristian Weisgerber
2006-06-02support tcp/udp port modifiers in ike rulesChristian Weisgerber