| Age | Commit message (Expand) | Author |
|---|
| 2019-02-19 | oops, bad Pp snuck in; | Jason McIntyre |
| 2019-02-18 | Rework the certificate generation examples a bit: | Stuart Henderson |
| 2019-01-22 | PF_ROUTE -> AF_ROUTE in the scattered sock()/setsockopt() calls | Kenneth R Westerback |
| 2018-09-20 | add missing braces implied by indentation | Jonathan Gray |
| 2018-04-17 | Document how to avoid isakmpd(8) source IP address pitfalls by using | Stefan Sperling |
| 2018-01-15 | Spacing, no object change. | Martin Pieuchot |
| 2018-01-04 | space -> tab | Martin Pieuchot |
| 2017-12-07 | Set the correct ENCAPSULATION_MODE when doing NAT-T. | Martin Pieuchot |
| 2017-12-05 | Use clock_gettime(CLOCK_MONOTONIC) to schedule timers | Jeremie Courreges-Anglas |
| 2017-11-23 | in isakmpd(8), provide a hint: from scott cheloha | Jason McIntyre |
| 2017-11-08 | In the final RFC 5903 the computation for the DH shared secret changed. | Patrick Wildt |
| 2017-10-27 | Support DH groups 19 to 21 and 25 to 30, just like iked(8) does. | Martin Pieuchot |
| 2017-09-18 | Check for failures of exchange_establish_p{1,2}() and call the given | Martin Pieuchot |
| 2017-08-22 | Remove listing of fixed bugs. | Martin Pieuchot |
| 2017-08-06 | Prevent a use-after-free by always passing dynamically allocated | Martin Pieuchot |
| 2017-07-18 | Prevent a NULL dereference when comparing incomplete SAs. | Martin Pieuchot |
| 2017-07-10 | remove misc. depend and yacc nits that no longer matter. | Marc Espie |
| 2017-07-03 | Generate source and header files for regress on demand. | Alexander Bluhm |
| 2017-06-16 | mark files as BUILDFIRST, or write explicit dependencies, so that most | Marc Espie |
| 2017-04-02 | Check return value of asprintf(), and don't use 0 as a char * | Tom Cosgrove |
| 2017-02-28 | Depending on the addresses, ipsecctl(8) automatically groups sa | Alexander Bluhm |
| 2017-02-03 | Stop assuming that in_{addr,port}_t are typedefed in <sys/types.h> and | Philip Guenther |
| 2017-01-04 | Remove modular exponential groups specified in RFC5114 | Mike Belopuhov |
| 2017-01-01 | Hyphenate compound adjectives 'up-to-date', 'out-of-date' and 'well-known' | Theo Buehler |
| 2016-09-03 | A commented block starts with | Theo de Raadt |
| 2016-09-02 | move links from http to https://www.openbsd.org/ | Theo Buehler |
| 2016-08-26 | Pull in <sys/select.h> for fd_set | Philip Guenther |
| 2016-04-04 | Fix memory leak. Call proto_free() always to free proto. | YASUOKA Masahiko |
| 2016-04-02 | Another use for fcntl() and thus of the superfluous 3rd parameter | Kenneth R Westerback |
| 2016-03-16 | More "(<blah> *)0" -> NULL, avoiding any stdarg functions. | Kenneth R Westerback |
| 2016-03-10 | Don't retransmit responses for unauthenticated messages. | YASUOKA Masahiko |
| 2016-03-05 | fix steps for cert creation; | Jason McIntyre |
| 2016-02-29 | Print ssize_t with %zd; ok deraadt@ mmcc@ | Jeremie Courreges-Anglas |
| 2016-01-11 | typo fix; from julian hsiao | Jason McIntyre |
| 2016-01-08 | tweak; from julian hsiao | Jason McIntyre |
| 2015-12-10 | Remove NULL-checks before free(). ok tb@ | mmcc |
| 2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber |
| 2015-10-15 | A classic case for bzero() -> explicit_bzero() | mmcc |
| 2015-09-25 | drop useless .Xo and .Bk, and shorten by avoiding some .Sm | Ingo Schwarze |
| 2015-08-20 | Do not cast a size_t to (unsigned long) to pass it as an argument to malloc. | Theo de Raadt |
| 2015-08-20 | <stdlib.h> is included, so do not need to cast result from | Theo de Raadt |
| 2015-06-03 | Do not assume that asprintf() clears the pointer on failure, which | Todd C. Miller |
| 2015-04-21 | No need to do "size = (size_t)sb.st_size" both before and after | Jonathan Gray |
| 2015-04-20 | Log if we refuse to continue the exchange when another one that corresponds | Mike Belopuhov |
| 2015-04-17 | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | Mike Belopuhov |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-03-26 | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | Mike Belopuhov |
| 2015-02-15 | convert bcmp to memcmp | Ted Unangst |
| 2015-02-07 | When getopt processing flags, many should be flag=1 instead of flag++ | Theo de Raadt |
| 2015-01-16 | Arguments are just ".Ar", not ".Brq Ar" or even ".Ns { Ns Ar ... Ns }". | Ingo Schwarze |
