summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2017-03-27Factor out flows into separate configuration messagesMike Belopuhov
2017-03-27spacingReyk Floeter
2017-03-27Fix another iked leak of SAs in pfkey_sa(), copy tags correctly.Reyk Floeter
2017-03-27Add support to reflect the responder IKEv2 COOKIE.Reyk Floeter
2017-03-27Add support for RFC4754 (ECDSA) and RFC7427 authentication.Reyk Floeter
2017-03-26Fix dhclient vis/unvis of strings stored in the leases file.Kenneth R Westerback
2017-03-26cleanup fdisk(8) partition names used by FAT file systems so they are moreIgor Sobrado
2017-03-23Fix printf() incantation for non-NULL terminated string.Kenneth R Westerback
2017-03-23set ps_noaction to not fork uneeded children when checking config with -nJonathan Gray
2017-03-21From a syslog perspective it does not make sense to log fatal andAlexander Bluhm
2017-03-21Replace a magic number with the corresponding macro from ieee80211_ioctl.h.Stefan Sperling
2017-03-21getnameinfo errors should go to stderr & should print what's going on.Florian Obser
2017-03-20show inet6 proposals in route monitorFlorian Obser
2017-03-20stop signposting; while here, knock out the comments;Jason McIntyre
2017-03-20as suggested by mpi, be less particular documentingJason McIntyre
2017-03-19"autoconf" belongs in the inet6 section, not the global options part;Jason McIntyre
2017-03-16remove the list of available sysctls: the sysctls are fullyJason McIntyre
2017-03-16Fix a regression preventing ``kern.profiling'' to return the profilingMartin Pieuchot
2017-03-13Resolve simultaneous Child SA rekeyingMike Belopuhov
2017-03-13Resolve simultaneous IKE SA rekeyingMike Belopuhov
2017-03-13Make sure that proposal contains a DH group when rekeying with PFS enabledReyk Floeter
2017-03-13NAT-T improvementsReyk Floeter
2017-03-13Don't rekey acquired Child SAsMike Belopuhov
2017-03-13Clarify iked.conf(5) manpage in regards to IP compression.Patrick Wildt
2017-03-13When setting up IPcomp flows for the networks 'A' and 'B' betweenPatrick Wildt
2017-03-13When freeing a Child SA make sure it's peer no longer points to itMike Belopuhov
2017-03-13Fix and improve the IKE SA rekeying timeout, add a randomized jitter.Reyk Floeter
2017-03-13Improve reporting of authentication errorsMike Belopuhov
2017-03-13flow_cmp() must compare the same flow-attributes as the kernel,Patrick Wildt
2017-03-13We need to call policy_ref() for policies that have refcountingPatrick Wildt
2017-03-12Make ifconfig scan display both wpa1 and wpa2 if both are supported.Stefan Sperling
2017-03-11Make 'ifconfig scan' display AP encryption correctly if WEP is configuredStefan Sperling
2017-03-11Introduce a new knob to force the first USB keyboard as console input.Martin Pieuchot
2017-03-08Shuffle, shuffle, shuffle.Kenneth R Westerback
2017-03-08Shuffle, shuffle, shuffle.Kenneth R Westerback
2017-03-08Shuffle, shuffle, shuffle.Kenneth R Westerback
2017-03-08Shuffle another bit of code closer to its friends.Kenneth R Westerback
2017-03-08Stray #endif w/o comment.Kenneth R Westerback
2017-03-08Move a line of code to group together code that will be mediatedKenneth R Westerback
2017-03-08Move ROUNDUP() to top of file, outside of warring #ifdef's to come.Kenneth R Westerback
2017-03-08Shuffle some functions around to group together functions that willKenneth R Westerback
2017-03-08Split a declaration to make the later insertion of #ifdef easier.Kenneth R Westerback
2017-03-08Shuffle some declarations. Both more style(9)'ish and make future diffKenneth R Westerback
2017-03-08Add comments to #endif's to allow easy differentiation between manyKenneth R Westerback
2017-03-04Add machdep.lidaction to list of sysctls.Martin Natano
2017-03-04Allow R (resize auto-partition) after A as well as when started with -A.Otto Moerbeek
2017-03-02Now that the kernel provides information about IPsec SA bundles,Alexander Bluhm
2017-03-02Implement a new routing message RTM_PROPOSAL that communicatesKenneth R Westerback
2017-03-02Add a new sysctl machdep.lidaction. The sysctl works as follows:Martin Natano
2017-02-28Depending on the addresses, ipsecctl(8) automatically groups saAlexander Bluhm