summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2006-06-12- add the sppp options to pppoe's synopsisJason McIntyre
2006-06-11the default encryption algorithm with static keying is AES-CBC now; ok hshoexer@Christian Weisgerber
2006-06-11As naddy@ pointed out RFC 3686 discourages use of AESCTR for staticHans-Joerg Hoexer
2006-06-11simplify usage(); ok krw deraadtJason McIntyre
2006-06-11options are optional ;)Jason McIntyre
2006-06-11split this page up into sections: it was getting too messy to read;Jason McIntyre
2006-06-11Adopt to recent changes (mopd3072 is not the default anymore).Hans-Joerg Hoexer
2006-06-11Document AESCTR for quick mode and SHA2-* for main mode. Help by jmc.Hans-Joerg Hoexer
2006-06-11tweaks;Jason McIntyre
2006-06-10Document -S and the "Delete-SAs" tag. Those will enable SA deletionHans-Joerg Hoexer
2006-06-10Make deletion of SAs on shutdown optional. The default behaviourHans-Joerg Hoexer
2006-06-10Allow isakmpd to use a different private rsa key per isakmp ID. Hans wrote th...Mathieu Sauve-Frankel
2006-06-10This shouldn't have been commited yet.Hans-Joerg Hoexer
2006-06-10support sha2 for main mode hmacs and aesctr for quick mode encryption.Hans-Joerg Hoexer
2006-06-10Better error message when a key file can not be opened or the provided key isHans-Joerg Hoexer
2006-06-10switch back to original defaults regarding DH groups. modp3072 is toHans-Joerg Hoexer
2006-06-10knf & careful data freeing, regression tested by toddTheo de Raadt
2006-06-09Allow for AH the use of the authentication algorithms added a while ago.Christian Weisgerber
2006-06-09EFI partition types; didickman@yahoo.comTheo de Raadt
2006-06-09Xo/Xc not needed here; from davidJason McIntyre
2006-06-09simplify previous;Jason McIntyre
2006-06-08fix usage, make synopsis more pretty. noticed by david@Hans-Joerg Hoexer
2006-06-08fix some indentation, noticed by david@Hans-Joerg Hoexer
2006-06-08Add a transport mode specifier to ike rules. Tunnel mode remains the default.Christian Weisgerber
2006-06-08allocate enough storage via sockaddr_storage for sockaddr_in6,Todd T. Fries
2006-06-08Fix a typo: When testing for quick mode lifetimes, make sure toHans-Joerg Hoexer
2006-06-08turns out this really doesn't break what is in the tree; ok hshoexer@Todd T. Fries
2006-06-07make sure, we initialize unspecified keys and spis. Noticed byHans-Joerg Hoexer
2006-06-07Do not yet expand the "any" keyword to v6 addresses. ok todd@Hans-Joerg Hoexer
2006-06-07remove unused prototype, ok todd@Hans-Joerg Hoexer
2006-06-06oopsTheo de Raadt
2006-06-06System build pieces for armish arch.Dale Rahn
2006-06-05Simpler code for printing time sensors: no leak and no floatingOtto Moerbeek
2006-06-04print time offsets much nicerTheo de Raadt
2006-06-03Use ifconfig delete/alias conforming with the man page.Marco Pfatschbacher
2006-06-03better synopsis for -g; ok mpfJason McIntyre
2006-06-03groups are specified using -g, not -m; ok mpfJason McIntyre
2006-06-03Do not set newaddr to 1 if "delete" was specified beforhands. In this caseClaudio Jeker
2006-06-03kill trailing whitespace;Jason McIntyre
2006-06-02Introduce attributes to interface groups.Marco Pfatschbacher
2006-06-02Big spelling cleanup, no binary change. From david@Hans-Joerg Hoexer
2006-06-02correct spelling of specifiedDavid Krause
2006-06-02Big whitespace cleanup.Hans-Joerg Hoexer
2006-06-02exit(2) when loading of rules did work partially. ok markus@Hans-Joerg Hoexer
2006-06-02document port modifiers in ike rulesChristian Weisgerber
2006-06-02support tcp/udp port modifiers in ike rulesChristian Weisgerber
2006-06-02backoff-cutoff defaults to 15 seconds; ok henning@Kevin Steves
2006-06-02print full information about tcpmd5 and ipcomp SAs, tooMarkus Friedl
2006-06-02add trailing \ when printing multiple lines for an SA, this wayMarkus Friedl
2006-06-02- sort optionsJason McIntyre