summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2017-04-19Rename all SA groups to bundles consistently. The first kernelAlexander Bluhm
2017-04-19Switch base tools from /dev/bpf0 to /dev/bpf. Now that /dev/bpf has beenMartin Natano
2017-04-19Bump numbers for /usr/obj allocation with *big* compilers.Theo Buehler
2017-04-19enlarge obj to satisfy new world order that has *big* compilers andOtto Moerbeek
2017-04-18Tweak parameters to decode_*, add a check or two, and thus gain most of theKenneth R Westerback
2017-04-18After 11 years of pondering about it I think that brookdavis@freebsd.orgKenneth R Westerback
2017-04-18use freezero()Theo de Raadt
2017-04-16Different compilers and versions of compilers have different warnings.Jonathan Gray
2017-04-14Up to now ipsecctl(8) grouped SAs with identical src and dst to theAlexander Bluhm
2017-04-13fix wrongly indented linesJonathan Gray
2017-04-13Add a NAT-T keepalive timer in case we are behind a NAT gateway.Patrick Wildt
2017-04-12Prevent inosused from wrapping when soft updates is enabled whileTodd C. Miller
2017-04-12RTM_PROTO3 messages should not trigger a resolv.conf check.Kenneth R Westerback
2017-04-12Shuffle another function.Kenneth R Westerback
2017-04-11Shuffle route/interface changing functions together into kroute.c. Try toKenneth R Westerback
2017-04-11Fold priv_write_file() into its only remaining userKenneth R Westerback
2017-04-10Rework -L logic to use the idiom used in handling the leases file.Kenneth R Westerback
2017-04-10Found another len += snprintf...Theo de Raadt
2017-04-10Remove always false comparison: inosused type is ino_t, which isFrederic Cambus
2017-04-09Seven casts, a couple of tweaks and CFLAGS+=-Wsign-compare for theKenneth R Westerback
2017-04-08Reduce the overburden of signed vs unsigned comparisons by sprinklingKenneth R Westerback
2017-04-08Replace another snprintf() dance with easier to read code usingKenneth R Westerback
2017-04-08Replace a mess of snprintf() dances with easier to read code usingKenneth R Westerback
2017-04-07Simply decoding of domain search option. No intentional functionalKenneth R Westerback
2017-04-06Inspired by recent dhcrelay(8) changes add some stricter CFLAGS. No codeKenneth R Westerback
2017-04-06less chatty EXAMPLES; from anton lindqvistJason McIntyre
2017-04-06document -=; while here, simplify things so that we don;t add a separateJason McIntyre
2017-04-05Shuffle sendhup() into dispatch.c, the only place it is used.Kenneth R Westerback
2017-04-05various improvements, from klemens nanni;Jason McIntyre
2017-04-04Send a RTM_PROPOSAL to clear out other dhclient instances on startup.Kenneth R Westerback
2017-04-04Treat SSID's like the 0 to 32 bytes of uint8_t data that they reallyKenneth R Westerback
2017-04-03warn format string should be literal.Frederic Cambus
2017-04-03Change parse_string() to take an optional integer pointer that canKenneth R Westerback
2017-04-03Simplify read_string() to just read the characters between the '"'s.Kenneth R Westerback
2017-04-03Tweak parse_string() to not consume the ';'. Simplifies/shortensKenneth R Westerback
2017-04-03Tweak 'expecting' parse_warn() messages to be more consistent.Kenneth R Westerback
2017-04-02Check return value of asprintf(), and don't use 0 as a char *Tom Cosgrove
2017-04-02Change parse_string() warning from "filename must be a string" toKenneth R Westerback
2017-03-30Only close the SA if an error happens before ikev2_msg_init() was calledPatrick Wildt
2017-03-28Add helpful debug messages to tell us why public key authentication failed.Reyk Floeter
2017-03-28Remove RSA from the list of keywords, lookup is now done in a table.Reyk Floeter
2017-03-28Don't send informational responses before we're having the key material.Reyk Floeter
2017-03-28Returning -1 in an imsg handler like ikev2_dispatch_cert aborts iked.Reyk Floeter
2017-03-27rather than printing the wrong function name, dont print it at all.Sebastian Benoit
2017-03-27Don't cache the DH group in the policyMike Belopuhov
2017-03-27correct verb pattern;Jason McIntyre
2017-03-27Factor out flows into separate configuration messagesMike Belopuhov
2017-03-27spacingReyk Floeter
2017-03-27Fix another iked leak of SAs in pfkey_sa(), copy tags correctly.Reyk Floeter
2017-03-27Add support to reflect the responder IKEv2 COOKIE.Reyk Floeter