Age | Commit message (Expand) | Author |
2023-12-20 | Don't unset the SA tag set by ipsec_sa_tag in ipsec_sa_iface. | Tobias Heider |
2023-08-08 | have a go at documenting the Interface config statement. | David Gwynne |
2023-08-07 | support configuring interface SAs for route-based ipsec vpns. | David Gwynne |
2023-03-31 | Add missing NULL check after group_get() | Theo Buehler |
2023-03-31 | Guard use of GROUP_EC2N with #ifndef OPENSSL_NO_EC2M | Theo Buehler |
2023-03-28 | Avoid double free in isakmpd | Theo Buehler |
2023-03-08 | Delete obsolete /* ARGSUSED */ lint comments. | Philip Guenther |
2023-02-08 | isakmpd: add missing void to a function definition | Theo Buehler |
2022-12-04 | userspace: remove vestigial '?' cases from top-level getopt(3) loops | Scott Soule Cheloha |
2022-03-31 | man pages: add missing commas between subordinate and main clauses | Christian Weisgerber |
2022-02-06 | remove please from manual pages | Jonathan Gray |
2022-01-31 | In isakmpd's pf_key_v2_enable_sa(), check if proto is NULL and if so, | Stuart Henderson |
2022-01-28 | When it's the possessive of 'it', it's spelled "its", without the | Philip Guenther |
2022-01-16 | isakmpd: fix -Wunused-but-set-variable warnings | Christian Weisgerber |
2022-01-14 | isakmpd: convert modp to opaque DH | Theo Buehler |
2021-11-30 | isakmpd: convert modp_init() for opaque DH. | Theo Buehler |
2021-11-29 | the code in this file has reason to include any sys/*.h header files, | Theo de Raadt |
2021-11-19 | isakmpd: stop reaching into EVP_PKEY. | Theo Buehler |
2021-11-03 | Clarify that ANY can be used for several parameters of IPsec transform. | YASUOKA Masahiko |
2021-10-31 | Now that X509_OBJECT is opaque, we need to allocate it on the heap | Theo Buehler |
2021-10-24 | For open/openat, if the flags parameter does not contain O_CREAT, the | Theo de Raadt |
2021-10-22 | remove some bad punctuation; | Jason McIntyre |
2021-10-22 | After deleting hifn(4) the only provider for the LZS compression | Alexander Bluhm |
2021-10-21 | isakmpd: prepare for opaque X509_STORE_CTX struct. | Theo Buehler |
2021-10-21 | isakmpd: prepare for opaque X509_EXTENSION struct. This needs to use | Theo Buehler |
2021-10-13 | isakmpd: remove #ifdefs for ancient OPENSSL_VERSIONs. | Theo Buehler |
2021-10-13 | isakmpd: remove libcrypto.c | Theo Buehler |
2021-10-09 | delete unneccessary arpa/nameser.h includes | Theo de Raadt |
2021-07-02 | call the API function X509_NAME_cmp(3) instead of the obsolete, | Ingo Schwarze |
2021-05-13 | Use field independent versions of {get,set}_coordinates() | Theo Buehler |
2021-02-11 | Link isakmpd dynamically. Mount /usr on NFS via IPsec does not | Alexander Bluhm |
2021-01-28 | Extern transport_list. Fixed compilation with -fno-common. | mortimer |
2020-07-07 | Fix shared DH secret length in log message. | tobhe |
2020-01-24 | Fix isakmpd monitor process to use the exit status of main process | YASUOKA Masahiko |
2019-12-19 | The previous fix for creating isakmpd(8) IKE pcap file, weakened | Alexander Bluhm |
2019-12-10 | If a file or directory component does not exists, realpath(3) returns | Alexander Bluhm |
2019-11-29 | Change the default security level for incoming IPsec flows from | tobhe |
2019-11-14 | Do not print misleading error message about permission error for | Alexander Bluhm |
2019-08-30 | mop up for the pcap.3 rename; | Jason McIntyre |
2019-07-03 | snprintf/vsnprintf return < 0 on error, rather than -1. | Theo de Raadt |
2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
2019-02-19 | oops, bad Pp snuck in; | Jason McIntyre |
2019-02-18 | Rework the certificate generation examples a bit: | Stuart Henderson |
2019-01-22 | PF_ROUTE -> AF_ROUTE in the scattered sock()/setsockopt() calls | Kenneth R Westerback |
2018-09-20 | add missing braces implied by indentation | Jonathan Gray |
2018-04-17 | Document how to avoid isakmpd(8) source IP address pitfalls by using | Stefan Sperling |
2018-01-15 | Spacing, no object change. | Martin Pieuchot |
2018-01-04 | space -> tab | Martin Pieuchot |
2017-12-07 | Set the correct ENCAPSULATION_MODE when doing NAT-T. | Martin Pieuchot |
2017-12-05 | Use clock_gettime(CLOCK_MONOTONIC) to schedule timers | Jeremie Courreges-Anglas |