summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2020-07-23Fix ibuf leak in sa_localauth when SA is freed.tobhe
2020-07-21rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to pfvar.hHenning Brauer
2020-07-21unify and cleanup -DSEEALSO chunks in both disklabel MakefilesTheo de Raadt
2020-07-21Provide GRE over transport mode examplekn
2020-07-21Handle TEMPORARY_FAILURE notification on IKESA rekeying.tobhe
2020-07-21extra garbage line found during archeologyTheo de Raadt
2020-07-20Fix dst/src port configuration bug with multiple flows.tobhe
2020-07-20Mention hostid and checksumkn
2020-07-20iked: fix typo in fatalxStuart Henderson
2020-07-19Try to deal with no reply from PF_KEY on pfkey_sa_add.tobhe
2020-07-17'seonds' -> 'seconds'.Kenneth R Westerback
2020-07-16Remove unused assignment.tobhe
2020-07-16Make sure to update policy dependant SA fields after policy_lookup().tobhe
2020-07-15Make CERT and CERTREQ payloads optional for public key authentication.tobhe
2020-07-15POWE9 CPUs provide an energy sensor that accumulates the emount of energyMark Kettenis
2020-07-14Properly clean up and dereference 'old' policy after failed lookup.tobhe
2020-07-13Both phase 1 and phase 5 need the cylinder group meta data, so save thoseOtto Moerbeek
2020-07-10table fix;Jason McIntyre
2020-07-10Document which crypto transforms are enabled by default.tobhe
2020-07-08Always try to retransmit on sendtofrom() errors to ensure the SAtobhe
2020-07-07Revert r1.121 and rewrite merge_option_data() to achieve same effectKenneth R Westerback
2020-07-07Fix shared DH secret length in log message.tobhe
2020-07-07Stop using make_addr() which trims trailing zeros of the netmask, setYASUOKA Masahiko
2020-07-03Rename IN6_IFF_PRIVACY to IN6_IFF_TEMPORARY.Florian Obser
2020-06-27remove the spacing around "arp | rarp", as prompted by schwarze;Jason McIntyre
2020-06-27macro fixes; from matthew martinJason McIntyre
2020-06-26Replace SIMPLEQ concatenation loop with SIMPLEQ_CONCATbket
2020-06-25Silence ca_validate_pubkey() error message for cert typetobhe
2020-06-25Rework 'ikeauth' configuration option. The key and cert checks in the configtobhe
2020-06-24spelling fix; from matthias schmidtJason McIntyre
2020-06-24Fix botched format string in previous commit as spotted by robert@Otto Moerbeek
2020-06-22use (undocumented) base64 code in libc instead of libcrypto.David Gwynne
2020-06-21various minor tweaks;Jason McIntyre
2020-06-21wgpip -> wgendpoint. ok dlg@Matthieu Herrb
2020-06-21teach ifconfig about wireguard.David Gwynne
2020-06-20With filesystem having many cylinder groups and many inodes per cg theOtto Moerbeek
2020-06-18Fix handling of short EAP-MSCHAP messages.tobhe
2020-06-17Fix length check in ca_getreq().tobhe
2020-06-15Log errors with log_info and SPI prepended.tobhe
2020-06-09Move AUTH_REQUEST SA state change from parser to IKE_AUTH exchange handler.tobhe
2020-06-05Add default proposals for AES-GCM ciphers in IKE and ESP.tobhe
2020-06-03Simplify logic in add_route(), eliminating pointless code duplication andKenneth R Westerback
2020-06-03Pass sockaddr instead of sockaddr_storage to sa_address.tobhe
2020-06-02Don't leak authmsg.tobhe
2020-06-01Fix "comparison of integers of different signs" warning.tobhe
2020-05-30Indentation style(9).tobhe
2020-05-29dev/rndvar.h no longer has statistical interfaces (removed during variousTheo de Raadt
2020-05-28Move duplicate SA negotiation code to ikev2_sa_negotiate_common().tobhe
2020-05-28A few stray 'ifa' overloadings.Kenneth R Westerback
2020-05-28Make generation numbers unsigned and fill them using a random numberOtto Moerbeek