| Age | Commit message (Expand) | Author |
|---|
| 2010-06-07 | fix a quoting wobble for the srcnat keyword; verified by reyk | Jason McIntyre |
| 2010-06-03 | update the manpages for isakmpd(8) and ipsec.conf(5) to point to iked(8) | Reyk Floeter |
| 2010-05-10 | Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' -> | Kenneth R Westerback |
| 2010-01-02 | Various syntax errors in list headers, found by mandoc(1), | Ingo Schwarze |
| 2009-11-13 | Don't use [] in function arguments when dealing with arrays | Jonathan Gray |
| 2009-10-21 | nat -> match...nat-to in example PF rule. ok mpf@ | Stuart Henderson |
| 2009-10-04 | When IKE is operating in dynamic mode and no srcid is given, the hostname | Joel Sing |
| 2009-08-04 | Specify an ID-type of IPV4_ADDR or IPV6_ADDR if the srcid or dstid is | Joel Sing |
| 2009-03-31 | Fixed memory leaks which would occur if the second of two memory | Tobias Stoeckmann |
| 2009-01-30 | If the "peer" address is not specified or derived from "to" for | Alexander Bluhm |
| 2009-01-29 | After checking that peer == NULL do not assign peer = NULL a few | Alexander Bluhm |
| 2009-01-29 | tweak previous; | Jason McIntyre |
| 2009-01-28 | Allow to specify ike and flow explicitly without peer. The any | Alexander Bluhm |
| 2009-01-27 | A warning text in ipsecctl was used twice. Make the messages unique | Alexander Bluhm |
| 2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a | Marco Pfatschbacher |
| 2008-12-22 | Only warn about pfkey failures when errno is != EEXIST. | Hans-Joerg Hoexer |
| 2008-11-29 | Explain how /32 changes the address type to IPV4_ADDR_SUBNET. From Mitja | Hans-Joerg Hoexer |
| 2008-11-14 | When parsing v4 addresses mark them as network addresses | Hans-Joerg Hoexer |
| 2008-10-17 | findeol() fix from pfctl | Henning Brauer |
| 2008-08-19 | use the actual keysize from the SA to figure out which AES variant | Markus Friedl |
| 2008-07-21 | Free the rules in the rule_queue also if ipsecctl is called with | Alexander Bluhm |
| 2008-07-01 | Isakmpd acquire mode did not work with a config generated from | Alexander Bluhm |
| 2008-07-01 | If a rules contains a hostname instead of an address, use the list | Alexander Bluhm |
| 2008-07-01 | If multiple to addresses but no peer are given in an ike or flow | Alexander Bluhm |
| 2008-06-14 | Move ike and flow peer selection to common function. | Alexander Bluhm |
| 2008-06-11 | trivial code simplification | Alexander Bluhm |
| 2008-04-11 | add support for the "include" directive using code from pfctl/parse.y. | Reyk Floeter |
| 2008-02-22 | Support for specifying aes-{128,192,256}. Originial idea by Prabhu | Hans-Joerg Hoexer |
| 2008-02-12 | document modifier types; requested by Aurelien | Jason McIntyre |
| 2008-01-04 | Strip off trailing '/32' when address type is IPV4_ADDR as isakmpd does | Hans-Joerg Hoexer |
| 2007-11-12 | Remove space/tab compression function from lgetc() and replace | Marco Pfatschbacher |
| 2007-10-22 | sync with daemon parser code. | Pierre-Yves Ritschard |
| 2007-10-16 | Allow '=' to end a number in all lexers. | Marco Pfatschbacher |
| 2007-10-16 | in the lex... even inside quotes, a \ followed by space or tab should | Theo de Raadt |
| 2007-10-13 | in all these programs using the same pfctl-derived parse.y, re-unify the | Theo de Raadt |
| 2007-10-11 | next step in the yylex unification: handle quoted strings in a nicer fashion | Theo de Raadt |
| 2007-09-17 | Document the syntax used with manual SAs for automatic creation | Stuart Henderson |
| 2007-09-12 | Here too: Add support to the lex for parsing number out of the stream. | Hans-Joerg Hoexer |
| 2007-08-21 | no need to include both sys/types.h and params.h | Hans-Joerg Hoexer |
| 2007-08-10 | duplicate strdup; ok hshoexer | Markus Friedl |
| 2007-07-03 | allow proto esp/ah in flow specification (especially useful for bypass flows) | Markus Friedl |
| 2007-05-31 | convert to new .Dd format; | Jason McIntyre |
| 2007-05-10 | Do not crash when lists include the "any" keyword. Reported by | Hans-Joerg Hoexer |
| 2007-03-16 | move autodetection of the ID type to the parser. this way the | Markus Friedl |
| 2007-03-06 | Explain, why aesctr has 160 bit keys (128 bit aes key + 32 bit nonce). | Hans-Joerg Hoexer |
| 2007-02-26 | Really, we don't need two grp18's ;-) | Todd T. Fries |
| 2007-02-19 | tweak; | Jason McIntyre |
| 2007-02-19 | Document NULL encryption. | Hans-Joerg Hoexer |
| 2007-02-19 | Bits for ESP+NULL encryption. This is useful, when AH can not be | Hans-Joerg Hoexer |
| 2007-02-19 | do not display empty authkey/enckey line when -k option is not | Hans-Joerg Hoexer |
