Age | Commit message (Expand) | Author |
2012-06-04 | Rounding up a number of bytes in a bignum returned by the BN_num_bytes() | Mike Belopuhov |
2012-03-24 | set the vendor string to OpenBSD-5.2; ok mikeb@ | Markus Friedl |
2012-01-16 | import (and fix) net_addrcmp() from libc as a static function. | Eric Faurot |
2011-12-12 | Allow using FQDN as a ID payload type. Some client (eg Windows XP) | YASUOKA Masahiko |
2011-10-20 | For NAT-T with transport mode, use the ISAKMP's SA addresses for the | YASUOKA Masahiko |
2011-09-29 | ssl.8: Certifying Authority -> Certificate Authority | Jason McIntyre |
2011-08-02 | add refcounting for "Configuration" section for acquire-mode SAs | Markus Friedl |
2011-06-23 | Use a common text explaining how the various configuration parsers using | Stuart Henderson |
2011-06-15 | When BN_bn2bin converts a bignum to the binary representation | Mike Belopuhov |
2011-06-06 | some improvements for the text on packet capture; from Lawrence Teo | Jason McIntyre |
2011-05-13 | wrong id for UDP_ENCAP_TRANSPORT_DRAFT; ok mikeb@ | Markus Friedl |
2011-04-23 | Indicate which side of the connection responded during phase 1 while using -v. | lum |
2011-04-16 | Allow -v (verbose logging) to work if a -D option is supplied. | Stuart Henderson |
2011-04-06 | Avoid using NULL in non-pointer contexts: use 0 for integer values and '\0' | Miod Vallat |
2011-02-03 | When binding to addresses, ignore any IP address not in the current | Peter Hessler |
2010-12-09 | When looking up an SA based on peer address, also check the port | Martin Hedenfal |
2010-11-29 | make key exchange faster by not checking the predefined groups with DH_check() | Markus Friedl |
2010-10-19 | convert to fuse cast from the libcrypto. with a simplification nit from | Mike Belopuhov |
2010-10-18 | as determined 4 years ago, FortiGate needs DOI of 0 responses to DPD | Todd T. Fries |
2010-10-15 | Switch the remaining users of libdes in src to libcrypto, | Jonathan Gray |
2010-09-22 | Support for use of AES-GCM-16 (as AESGCM) and ENCR_NULL_AUTH_AES_GMAC | Mike Belopuhov |
2010-08-04 | fixup keylength for aes-128-cbc in quickmode | Theo de Raadt |
2010-06-29 | Replace the hand-crafted Diffie-Hellman implementation in isakmpd with | Reyk Floeter |
2010-06-07 | make clearer the relationship between isakmpd and ikev1; and iked and ikev2; | Jason McIntyre |
2010-06-03 | update the manpages for isakmpd(8) and ipsec.conf(5) to point to iked(8) | Reyk Floeter |
2010-05-10 | Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' -> | Kenneth R Westerback |
2010-04-15 | Log when isakmpd starts - patch from Toni Mueller | lum |
2010-04-06 | fix some more dodgy "-indent"; aucat.1 has some too, but i'll leave that for | Jason McIntyre |
2010-03-26 | dispense with some wacky escape sequences; | Jason McIntyre |
2010-03-04 | don't crash on invalid phase 2 IDs; from hshoexer; ok sthen@ | Markus Friedl |
2010-01-10 | only substract ISAKMP_ID_DATA_OFF once. otherwise 'buf' might overflow | Markus Friedl |
2010-01-03 | Neither .Pp nor unqualified text are allowed at the top level of .Bl; | Ingo Schwarze |
2009-11-13 | fix a few memory leaks found by parfait; ok hshoexer | Theo de Raadt |
2009-06-25 | Add missing RTM_VERSION check. This is needed before accessing other data | Claudio Jeker |
2009-06-05 | rtm->rtm_hdrlen conversion | Chris Cappuccio |
2009-01-29 | Improve logging: | Hans-Joerg Hoexer |
2009-01-28 | cleaning up my tree: trivial KNF and a comment fix. | Hans-Joerg Hoexer |
2009-01-28 | Remove some dead (#if 0) code. | Hans-Joerg Hoexer |
2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a | Marco Pfatschbacher |
2008-12-22 | mark log_fatal() and monitor_exit() as __dead, as they do not return. | Hans-Joerg Hoexer |
2008-11-11 | Use rfc2409 conform notification message when client identities are | Hans-Joerg Hoexer |
2008-10-21 | do not listen on tentative (during DAD), duplicated (after DAD) or | Markus Friedl |
2008-09-06 | adapt to API changes in OpenSSL 0.9.8h | Damien Miller |
2008-09-06 | adapt to sha2(3) API changes; ok millert@ | Damien Miller |
2008-07-22 | If isakmpd is started with -4 or -6, virtual_get_default() may | Alexander Bluhm |
2008-07-01 | Isakmpd acquire mode did not work with a config generated from | Alexander Bluhm |
2008-06-10 | Arguments to fifo commands were limited to 80 bytes. That is too | Alexander Bluhm |
2008-06-10 | Fix implementation of IN6_IS_ADDR_FULL so that IPV6_ADDR is used | Alexander Bluhm |
2008-05-12 | Error out with usage line if additional arguments are given after the | Pierre-Yves Ritschard |
2008-03-24 | msg_controllen has to be CMSG_SPACE so that the kernel can account for | Theo de Raadt |