| Age | Commit message (Expand) | Author |
|---|
| 2017-12-05 | Use clock_gettime(CLOCK_MONOTONIC) to schedule timers | Jeremie Courreges-Anglas |
| 2017-12-05 | When removing duplicate dynamic leases from the cache, compare the | Kenneth R Westerback |
| 2017-12-05 | When sending out a proposal we create an SA/SPI for the Child SAs if we | Patrick Wildt |
| 2017-12-04 | Remove duplicate check that never could execute because the exact same | Patrick Wildt |
| 2017-12-04 | Consistently log "malformed payload" instead of "payload malformed", and | Patrick Wildt |
| 2017-12-04 | Remove check that is now a duplicate due to recent refactoring. | Patrick Wildt |
| 2017-12-04 | The payloads are layered like onions, so you can validate one layer and | Patrick Wildt |
| 2017-12-04 | change "if (lp &&" to "if lp != NULL &&". | Theo Buehler |
| 2017-12-04 | Avoid a NULL-deref in get_recorded_lease() leading to a segfault seen | Theo Buehler |
| 2017-12-04 | Initialize variable, otherwise the pointer might contain stack garbage. | Patrick Wildt |
| 2017-12-03 | If we wanted to send out more proposals than just one, we need to set a | Patrick Wildt |
| 2017-12-03 | The RFC specifies that to accept a proposal, we must select a transform | Patrick Wildt |
| 2017-12-03 | Move timer fields 'expiry" and "rebind" out of struct client_lease | Kenneth R Westerback |
| 2017-12-03 | Abandon nagging about "_" violating RFC 952. This removes the need | Kenneth R Westerback |
| 2017-12-01 | The RFC specifies that in an SA payload the proposals must be numbered | Patrick Wildt |
| 2017-12-01 | Turns out that, as specified in the RFC, the initial Child SA does not | Patrick Wildt |
| 2017-11-30 | Add support for rejecting IKE SA messages. This means that we can reply | Patrick Wildt |
| 2017-11-30 | use the same macro consistently for the various carp balancing modes; | Jason McIntyre |
| 2017-11-30 | no more arp mode for carp; from martin rettberg | Jason McIntyre |
| 2017-11-29 | Print_host is used mainly in printf style functions. So do not return NULL | Claudio Jeker |
| 2017-11-28 | The divert structure was using the port number to indicate that | Alexander Bluhm |
| 2017-11-28 | in auto-allocation, increase size of /usr/src to 1.3G. | Sebastian Benoit |
| 2017-11-27 | The divert structure was using the port number to indicate that | Alexander Bluhm |
| 2017-11-27 | Implement MOBIKE (RFC 4555) support in iked(8), with us acting as | Patrick Wildt |
| 2017-11-27 | Simplify lease_as_string() logic to use a single time_t variable | Kenneth R Westerback |
| 2017-11-27 | Fix pasto so lease_rebind() returns rebind value and not | Kenneth R Westerback |
| 2017-11-26 | Move rebind time calculation to a function lease_rebind(), just like | Kenneth R Westerback |
| 2017-11-25 | - pfctl fails to handle nested 'load anchor' properly | Alexandr Nedvedicky |
| 2017-11-25 | - patching use-after-free and innocent memory leak in pfctl_optimzie.c | Alexandr Nedvedicky |
| 2017-11-25 | - pfctl rule optimizer: anchor name vs. anchor path mix up | Alexandr Nedvedicky |
| 2017-11-24 | Remove 'renewal' field from struct client_lease. Add lease_renewal() to | Kenneth R Westerback |
| 2017-11-23 | in isakmpd(8), provide a hint: from scott cheloha | Jason McIntyre |
| 2017-11-23 | Fix use of lease_expiry() in set_lease_times(). lease_expiry() returns | Kenneth R Westerback |
| 2017-11-20 | Wnen purging dhclient.leases and when looking for unexpired offers to | Kenneth R Westerback |
| 2017-11-20 | Support collapsing flow outputs. | Martin Pieuchot |
| 2017-11-18 | Generate correct time comments (renewal/rebind/expiry) in | Kenneth R Westerback |
| 2017-11-17 | replace the deletetunnel option with -tunnel | Sebastian Benoit |
| 2017-11-16 | Range check default values so that a range like | Kenneth R Westerback |
| 2017-11-15 | Reset the OCSP URL on config reload. Otherwise we end up not being | Patrick Wildt |
| 2017-11-14 | - nested anchors vs. pfctl/parse.y | Alexandr Nedvedicky |
| 2017-11-14 | Treat invalid server name as empty instead of declining the lease offered | Martin Pieuchot |
| 2017-11-13 | Constrain MBR partition offsets to 0 .. disk.size - 1. | Kenneth R Westerback |
| 2017-11-13 | add a generic packet rate matching filter. allows things like | Henning Brauer |
| 2017-11-12 | Clone epoch value in clone_lease(), not manually. | Kenneth R Westerback |
| 2017-11-09 | tweak previous; | Jason McIntyre |
| 2017-11-09 | Use lease 'epoch' (time lease was acquired) to calculate timers for | Kenneth R Westerback |
| 2017-11-08 | Add a type cast to force signed comparison. This fixes a loop | Visa Hankala |
| 2017-11-08 | Do not accept superfluous arguments. | Patrick Wildt |
| 2017-11-08 | In the final RFC 5903 the computation for the DH shared secret changed. | Patrick Wildt |
| 2017-11-08 | For IPcomp we need to load explicit ESP-flows for the IPIP or IPCOMP | Patrick Wildt |
