summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2017-04-05various improvements, from klemens nanni;Jason McIntyre
2017-04-04Send a RTM_PROPOSAL to clear out other dhclient instances on startup.Kenneth R Westerback
2017-04-04Treat SSID's like the 0 to 32 bytes of uint8_t data that they reallyKenneth R Westerback
2017-04-03warn format string should be literal.Frederic Cambus
2017-04-03Change parse_string() to take an optional integer pointer that canKenneth R Westerback
2017-04-03Simplify read_string() to just read the characters between the '"'s.Kenneth R Westerback
2017-04-03Tweak parse_string() to not consume the ';'. Simplifies/shortensKenneth R Westerback
2017-04-03Tweak 'expecting' parse_warn() messages to be more consistent.Kenneth R Westerback
2017-04-02Check return value of asprintf(), and don't use 0 as a char *Tom Cosgrove
2017-04-02Change parse_string() warning from "filename must be a string" toKenneth R Westerback
2017-03-30Only close the SA if an error happens before ikev2_msg_init() was calledPatrick Wildt
2017-03-28Add helpful debug messages to tell us why public key authentication failed.Reyk Floeter
2017-03-28Remove RSA from the list of keywords, lookup is now done in a table.Reyk Floeter
2017-03-28Don't send informational responses before we're having the key material.Reyk Floeter
2017-03-28Returning -1 in an imsg handler like ikev2_dispatch_cert aborts iked.Reyk Floeter
2017-03-27rather than printing the wrong function name, dont print it at all.Sebastian Benoit
2017-03-27Don't cache the DH group in the policyMike Belopuhov
2017-03-27correct verb pattern;Jason McIntyre
2017-03-27Factor out flows into separate configuration messagesMike Belopuhov
2017-03-27spacingReyk Floeter
2017-03-27Fix another iked leak of SAs in pfkey_sa(), copy tags correctly.Reyk Floeter
2017-03-27Add support to reflect the responder IKEv2 COOKIE.Reyk Floeter
2017-03-27Add support for RFC4754 (ECDSA) and RFC7427 authentication.Reyk Floeter
2017-03-26Fix dhclient vis/unvis of strings stored in the leases file.Kenneth R Westerback
2017-03-26cleanup fdisk(8) partition names used by FAT file systems so they are moreIgor Sobrado
2017-03-23Fix printf() incantation for non-NULL terminated string.Kenneth R Westerback
2017-03-23set ps_noaction to not fork uneeded children when checking config with -nJonathan Gray
2017-03-21From a syslog perspective it does not make sense to log fatal andAlexander Bluhm
2017-03-21Replace a magic number with the corresponding macro from ieee80211_ioctl.h.Stefan Sperling
2017-03-21getnameinfo errors should go to stderr & should print what's going on.Florian Obser
2017-03-20show inet6 proposals in route monitorFlorian Obser
2017-03-20stop signposting; while here, knock out the comments;Jason McIntyre
2017-03-20as suggested by mpi, be less particular documentingJason McIntyre
2017-03-19"autoconf" belongs in the inet6 section, not the global options part;Jason McIntyre
2017-03-16remove the list of available sysctls: the sysctls are fullyJason McIntyre
2017-03-16Fix a regression preventing ``kern.profiling'' to return the profilingMartin Pieuchot
2017-03-13Resolve simultaneous Child SA rekeyingMike Belopuhov
2017-03-13Resolve simultaneous IKE SA rekeyingMike Belopuhov
2017-03-13Make sure that proposal contains a DH group when rekeying with PFS enabledReyk Floeter
2017-03-13NAT-T improvementsReyk Floeter
2017-03-13Don't rekey acquired Child SAsMike Belopuhov
2017-03-13Clarify iked.conf(5) manpage in regards to IP compression.Patrick Wildt
2017-03-13When setting up IPcomp flows for the networks 'A' and 'B' betweenPatrick Wildt
2017-03-13When freeing a Child SA make sure it's peer no longer points to itMike Belopuhov
2017-03-13Fix and improve the IKE SA rekeying timeout, add a randomized jitter.Reyk Floeter
2017-03-13Improve reporting of authentication errorsMike Belopuhov
2017-03-13flow_cmp() must compare the same flow-attributes as the kernel,Patrick Wildt
2017-03-13We need to call policy_ref() for policies that have refcountingPatrick Wildt
2017-03-12Make ifconfig scan display both wpa1 and wpa2 if both are supported.Stefan Sperling
2017-03-11Make 'ifconfig scan' display AP encryption correctly if WEP is configuredStefan Sperling