summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2017-12-03The RFC specifies that to accept a proposal, we must select a transformPatrick Wildt
2017-12-03Move timer fields 'expiry" and "rebind" out of struct client_leaseKenneth R Westerback
2017-12-03Abandon nagging about "_" violating RFC 952. This removes the needKenneth R Westerback
2017-12-01The RFC specifies that in an SA payload the proposals must be numberedPatrick Wildt
2017-12-01Turns out that, as specified in the RFC, the initial Child SA does notPatrick Wildt
2017-11-30Add support for rejecting IKE SA messages. This means that we can replyPatrick Wildt
2017-11-30use the same macro consistently for the various carp balancing modes;Jason McIntyre
2017-11-30no more arp mode for carp; from martin rettbergJason McIntyre
2017-11-29Print_host is used mainly in printf style functions. So do not return NULLClaudio Jeker
2017-11-28The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-28in auto-allocation, increase size of /usr/src to 1.3G.Sebastian Benoit
2017-11-27The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-27Implement MOBIKE (RFC 4555) support in iked(8), with us acting asPatrick Wildt
2017-11-27Simplify lease_as_string() logic to use a single time_t variableKenneth R Westerback
2017-11-27Fix pasto so lease_rebind() returns rebind value and notKenneth R Westerback
2017-11-26Move rebind time calculation to a function lease_rebind(), just likeKenneth R Westerback
2017-11-25- pfctl fails to handle nested 'load anchor' properlyAlexandr Nedvedicky
2017-11-25- patching use-after-free and innocent memory leak in pfctl_optimzie.cAlexandr Nedvedicky
2017-11-25- pfctl rule optimizer: anchor name vs. anchor path mix upAlexandr Nedvedicky
2017-11-24Remove 'renewal' field from struct client_lease. Add lease_renewal() toKenneth R Westerback
2017-11-23in isakmpd(8), provide a hint: from scott chelohaJason McIntyre
2017-11-23Fix use of lease_expiry() in set_lease_times(). lease_expiry() returnsKenneth R Westerback
2017-11-20Wnen purging dhclient.leases and when looking for unexpired offers toKenneth R Westerback
2017-11-20Support collapsing flow outputs.Martin Pieuchot
2017-11-18Generate correct time comments (renewal/rebind/expiry) inKenneth R Westerback
2017-11-17replace the deletetunnel option with -tunnelSebastian Benoit
2017-11-16Range check default values so that a range likeKenneth R Westerback
2017-11-15Reset the OCSP URL on config reload. Otherwise we end up not beingPatrick Wildt
2017-11-14- nested anchors vs. pfctl/parse.yAlexandr Nedvedicky
2017-11-14Treat invalid server name as empty instead of declining the lease offeredMartin Pieuchot
2017-11-13Constrain MBR partition offsets to 0 .. disk.size - 1.Kenneth R Westerback
2017-11-13add a generic packet rate matching filter. allows things likeHenning Brauer
2017-11-12Clone epoch value in clone_lease(), not manually.Kenneth R Westerback
2017-11-09tweak previous;Jason McIntyre
2017-11-09Use lease 'epoch' (time lease was acquired) to calculate timers forKenneth R Westerback
2017-11-08Add a type cast to force signed comparison. This fixes a loopVisa Hankala
2017-11-08Do not accept superfluous arguments.Patrick Wildt
2017-11-08In the final RFC 5903 the computation for the DH shared secret changed.Patrick Wildt
2017-11-08For IPcomp we need to load explicit ESP-flows for the IPIP or IPCOMPPatrick Wildt
2017-11-06Add lease declaration 'epoch' to hold the time() when a lease isKenneth R Westerback
2017-11-06Add format 't' to parse_decimal() for signed 64-bitKenneth R Westerback
2017-11-05ifconfig <if> giftunnel was deprecated in 2001, it's never too late toSebastian Benoit
2017-11-04Don't keep blindly chugging along when receiving an unexpected imsg,Florian Obser
2017-11-04Decline duplicate offers for the requested address, as areKenneth R Westerback
2017-11-03There can be multiple default routers sending router advertisements.Florian Obser
2017-10-30Fix '-L' file handling. Mixing idioms in previous cleanups ended upKenneth R Westerback
2017-10-30Exit printing an error message if SIOCSIFMEDIA fails.Martin Pieuchot
2017-10-30In the subjectAltName comparison, the bzero before the while-loop wasPatrick Wildt
2017-10-27zap a bad space in usage(): sorry ken for not spotting!Jason McIntyre
2017-10-27Add '-n' option to just parse dhclient.conf for errors.Kenneth R Westerback