src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-10-01	Only count the proper node types. Avoid out of-bound access for large	Otto Moerbeek
2020-09-30	Don't accept AUTH payloads with invalid auth_method 0.	tobhe
2020-09-30	Don't accept ID payloads with ID type IKEV2_ID_NONE.	tobhe
2020-09-30	Don't leak sa->sa_peerauth.id_buf.	tobhe
2020-09-29	Check ibuf_seek() return value.	tobhe
2020-09-28	Revert a wording change that was made in revision 1.05	solene
2020-09-26	Cleanup msg_eap in ikev2_msg_cleanup().	tobhe
2020-09-25	Simplify RB_TREE cleanup loops.	tobhe
2020-09-24	Cleanup logging, print SPIs where it makes sense.	tobhe
2020-09-23	Add new 'set cert_partial_chain' config option to allow verification of	tobhe
2020-09-21	Fix reassembly of out-of-order fragments. Always take the nextpld field	tobhe
2020-09-21	Missing space for '-i interval' option error message.	Marcus Glocker
2020-09-19	Add SHA2_384 and SHA2_512 to default proposals.	tobhe
2020-09-18	Fix memory leak in 'n->name'.	tobhe
2020-09-17	With the multi rdomain support, slaacd now sees all icmpv6 packets and	Sebastien Marie
2020-09-17	Fix the previous commit whose conditions were reversed.	YASUOKA Masahiko
2020-09-17	Set retransmit timeout for DELETE message on the replaced SA, not on	tobhe
2020-09-17	Do not send DELETE messages for closing SAs.	tobhe
2020-09-17	Make pfctl(8) check if the rtable really exists when parsing the	YASUOKA Masahiko
2020-09-17	Merge IKEV2_EXCHANGE_CREATE_CHILD_SA and IKEV2_EXCHANGE_INFORMATIONAL	tobhe
2020-09-16	Move all the EAP logic from a single branch in the message parsing code to	tobhe
2020-09-16	Fix EAP authentication if the initiator sends no certificate	tobhe
2020-09-15	"Route show" and "netstat -r" provide formatting for routing tables with	pamela
2020-09-15	umb(4) shows the speed of the LTE connection but misses the b in Mbps.	Claudio Jeker
2020-09-14	We might race against removal of an rdomain we just want to handle.	Florian Obser
2020-09-14	Let slaacd handle all rdomains in a single daemon.	Florian Obser
2020-09-12	When an interface disapears we need to forget the learned autoconf	Florian Obser
2020-09-09	Delete dead code.	tobhe
2020-09-08	Fix auth method negotiation for IKEV2_CERT_X509_CERT. If a cert matching	tobhe
2020-09-06	Drop redundant else for readability.	tobhe
2020-09-05	Use peer from policy, not from the acquire message.	tobhe
2020-09-05	Initialize flow_dir and flow_saproto so policy_test() can find the policy	tobhe
2020-09-04	INFORMATIONAL and CREATE_CHILD_SA exchanges cannot be initiated at the	tobhe
2020-09-03	Log OCSP url on connection failure.	tobhe
2020-09-02	Add 30s timeout for OCSP requests.	tobhe
2020-09-01	Log SPIs to make it easier to map OCSP messages to SAs.	tobhe
2020-09-01	Make OCSP response status logging less verbose.	tobhe
2020-08-31	Do not register a read/write callback on fd -1 (e.g. if connection failed).	tobhe
2020-08-31	Both ocsp_req_ctx and ocsp_req must be freed. Don't free ocsp_id as it	tobhe
2020-08-31	Use SA header (SPIs) to map OCSP connect requests to their respective	tobhe
2020-08-29	Use SO_REUSEADDR on the listening sockets	Jeremie Courreges-Anglas
2020-08-29	Missing prototype for a currently unused function.	Florian Obser
2020-08-29	sync to libunbound-1.11.0	Florian Obser
2020-08-28	Rename ikev2_*_sa() functions to make clear they handle Child SAs.	tobhe
2020-08-27	Make sure to save certificate in the CERTINVALID case to fix	tobhe
2020-08-26	Allow disabling DPD liveness checks by setting dpd_check_interval to 0.	tobhe
2020-08-25	Fix undefined symbol.	tobhe
2020-08-25	Add dpd_check_interval configuration option. If for any IKE SA no IPsec	tobhe
2020-08-24	Reduce the amount of boilerplate code and imsgs for config options by	tobhe
2020-08-24	some tweaks to the "group" text, from evan silberman;	Jason McIntyre