summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2010-06-29Replace enc(4) with a new implementation as a cloner device. We stillReyk Floeter
2010-06-29add code to lookup the RSA public keys in /etc/iked/pubkeys/ as anReyk Floeter
2010-06-29Replace the hand-crafted Diffie-Hellman implementation in isakmpd withReyk Floeter
2010-06-29Add missing frees.Reyk Floeter
2010-06-29Fix use after free. Found by regress tests.Charles Longeau
2010-06-29list kern.rthreads as a knob you can but shouldn't turnTed Unangst
2010-06-28Clean up iterface stats handling:Ryan Thomas McBride
2010-06-28A long time ago when wsconsctl was written it expected that ksym was uniq.Mats O Jansson
2010-06-27tweak previous; ok claudioJason McIntyre
2010-06-27Make 'route exec' emit error messages like xargs when execve() fails does.Philip Guenthe
2010-06-27When a peer requests a certificate from the local gateway, we firstReyk Floeter
2010-06-27fix possible double free of the initiator certReyk Floeter
2010-06-27fix the length check for ASN1_ID Ids.Reyk Floeter
2010-06-27Verify that the subjectAltName extension is present and matches theReyk Floeter
2010-06-27Instead of modifying and fiddling with the IKE SA in the payloadReyk Floeter
2010-06-27print the required bits as a stringReyk Floeter
2010-06-27cycle static buffers in print_bits()Reyk Floeter
2010-06-26malloc/strlcpy -> strdup. Apparently I forgot to commit this one withKenneth R Westerback
2010-06-26Whitespace.Kenneth R Westerback
2010-06-26revert the files that have been accidentally committed with myReyk Floeter
2010-06-26Add a way to enable and set the keepalive parameters for gre(4).Claudio Jeker
2010-06-26mixing any (AF_UNSPEC) with AF_INET/INET6 is not an address family mismatchReyk Floeter
2010-06-26Include the Id type in the generated SA tag that is passed to theReyk Floeter
2010-06-26allow a user to set a -c count of 0.Peter Hessler
2010-06-25remove -m (merge).Henning Brauer
2010-06-24unbreak the ikectl log verbose/brief commands.Reyk Floeter
2010-06-23rename the ec groups to either ec2n or ecp (eg. ec155 -> ec2n155 orReyk Floeter
2010-06-23further cleanup of the dh code:Reyk Floeter
2010-06-22rename devname->devicename to prevent shadowing devname(3). ok marco jsingDarren Tucker
2010-06-18Make bioctl(8) disklabel UID friendly by attempting to open the deviceJoel Sing
2010-06-15When fsck_ffs is used with disklabel UIDs the hot root test fails inJoel Sing
2010-06-15fix keyword sort orderReyk Floeter
2010-06-15only compare the SPIi in the SA treeReyk Floeter
2010-06-14check if cert is available and validReyk Floeter
2010-06-14Initiator mode with certificates; needs more work but works.Reyk Floeter
2010-06-14Initial support for initiator mode which allows to run iked as aReyk Floeter
2010-06-14the ikesa prf config option is currently brokenReyk Floeter
2010-06-14fix block length for AESReyk Floeter
2010-06-14fix EAP responder modeReyk Floeter
2010-06-14NAT detection again: make it work in initiator and responder modeReyk Floeter
2010-06-14remove policy lookup debug messageReyk Floeter
2010-06-14NAT detection with SPIr is always 0Reyk Floeter
2010-06-14restructure code a bit to move closer to initiator mode:Reyk Floeter
2010-06-14cleanup messages and parsed information correctlyReyk Floeter
2010-06-14add define for saproto 0Reyk Floeter
2010-06-14More code for initiator mode (not finished yet)Reyk Floeter
2010-06-11add some infrastructure to support timers and initiator mode later.Reyk Floeter
2010-06-11tweak the code slightly so we can remove -lsslJonathan Gray
2010-06-10don't print keywords as underlined arguments.Reyk Floeter
2010-06-10update usage()Reyk Floeter
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-25 12:30:33 +0000