| Age | Commit message (Expand) | Author |
|---|
| 2022-01-31 | In isakmpd's pf_key_v2_enable_sa(), check if proto is NULL and if so, | Stuart Henderson |
| 2022-01-16 | isakmpd: fix -Wunused-but-set-variable warnings | Christian Weisgerber |
| 2021-10-22 | After deleting hifn(4) the only provider for the LZS compression | Alexander Bluhm |
| 2019-11-29 | Change the default security level for incoming IPsec flows from | tobhe |
| 2017-12-05 | Use clock_gettime(CLOCK_MONOTONIC) to schedule timers | Jeremie Courreges-Anglas |
| 2017-08-06 | Prevent a use-after-free by always passing dynamically allocated | Martin Pieuchot |
| 2017-02-28 | Depending on the addresses, ipsecctl(8) automatically groups sa | Alexander Bluhm |
| 2015-12-10 | Remove NULL-checks before free(). ok tb@ | mmcc |
| 2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
| 2015-08-20 | <stdlib.h> is included, so do not need to cast result from | Theo de Raadt |
| 2015-04-17 | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | Mike Belopuhov |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-03-26 | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | Mike Belopuhov |
| 2014-10-29 | convert simple cases of select() to poll() | Theo de Raadt |
| 2014-10-22 | Fix error reporting when reallocarray() fails. OK miod@ | Todd C. Miller |
| 2014-10-18 | Convert malloc() with a size var using multiplication to reallocarray(). | Doug Hogan |
| 2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | Christian Weisgerber |
| 2011-08-02 | add refcounting for "Configuration" section for acquire-mode SAs | Markus Friedl |
| 2010-09-22 | Support for use of AES-GCM-16 (as AESGCM) and ENCR_NULL_AUTH_AES_GMAC | Mike Belopuhov |
| 2009-01-28 | cleaning up my tree: trivial KNF and a comment fix. | Hans-Joerg Hoexer |
| 2008-07-01 | Isakmpd acquire mode did not work with a config generated from | Alexander Bluhm |
| 2008-06-10 | Fix implementation of IN6_IS_ADDR_FULL so that IPV6_ADDR is used | Alexander Bluhm |
| 2007-09-02 | use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsg | Theo de Raadt |
| 2007-05-27 | Don't include sys/mbuf.h it is not needed. OK mcbride@ msf@ | Claudio Jeker |
| 2007-04-16 | There's no point in checking ptr for NULL before doing free(ptr) | Moritz Jodeit |
| 2007-04-08 | Fix lint comments. s/Fall through/FALLTHROUGH/. | Moritz Jodeit |
| 2007-02-19 | isakmpd bits for ESP+NULL encryption. This is useful, when AH can | Hans-Joerg Hoexer |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2006-09-01 | Add a new UI command to force isakmpd into passive only mode. | Marco Pfatschbacher |
| 2006-08-30 | fix isakmpd -Ka, as used by bgpd, or acquire flows set up via ipsecctl. | Henning Brauer |
| 2006-08-30 | need to retry writing to pfkey socket on EAGAIN, ok theo hshoexer | Henning Brauer |
| 2006-08-30 | do not call pf_key_v2_disable_sa twice; ok hshoexer, ho | Markus Friedl |
| 2006-06-10 | support sha2 for main mode hmacs and aesctr for quick mode encryption. | Hans-Joerg Hoexer |
| 2006-05-31 | tiny KNF | Hans-Joerg Hoexer |
| 2006-05-31 | Make sure, that phase 1 SAs of active connections stay alive. Fixes a DPD | Hans-Joerg Hoexer |
| 2006-05-29 | export pf_key_v2_disable_sa() (unbreaks build) | Markus Friedl |
| 2005-11-14 | use snprintf; ok cloder. also looked at by a few other people | Theo de Raadt |
| 2005-06-14 | add ENCAP_UDP_{TUNNEL,TRANSPORT} types according to rfc 3947 | Hans-Joerg Hoexer |
| 2005-06-01 | Fix memory leak. OK hshoexer | Chad Loder |
| 2005-05-22 | No more ifdef KAME. From hshoexer | Chad Loder |
| 2005-04-08 | get rid of sysdep_sa_len | Hans-Joerg Hoexer |
| 2005-04-08 | USE_DEBUG is bye bye | Theo de Raadt |
| 2005-04-08 | keynote and policy always compiled in | Theo de Raadt |
| 2005-04-08 | nat-traversal always | Theo de Raadt |
| 2005-04-08 | kill USE_OLD_SOCKADDR | Theo de Raadt |
| 2005-04-08 | Remove references to LINUX_IPSEC | Chad Loder |
| 2005-04-06 | knf, ok cloder | Theo de Raadt |
| 2005-04-05 | Always compile X509 support. Almost everyone uses it. Makes the code | Chad Loder |
| 2005-04-04 | spacing; ok cloder | Theo de Raadt |
| 2005-03-02 | knf, linewrapping, whitespaces, no binary change | Hans-Joerg Hoexer |
