summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2020-11-18Tweak debug messages around resolv.conf updating.Kenneth R Westerback
2020-11-17Remove redundant indirection via msg_parent. This is only needed intobhe
2020-11-17Fix comment sysctl(3) -> sysctl(2).Marcus Glocker
2020-11-16Reenable ikev2_init_auth() return value check. Make sure sa_stateok()tobhe
2020-11-16Backout ikev2_init_auth() return check to fix regression withtobhe
2020-11-15Document new 'dynamic' keyword to create flows from or to a dynamicallytobhe
2020-11-14Constify dktypenames and fstypenames in libc.Philip Guenther
2020-11-14Make sure not to replace 0.0.0.0 with dynamic address if it is a a networktobhe
2020-11-13addr_net is already checked in ikev2_cp_setaddr() before sessingtobhe
2020-11-12Close SA if ikev2_init_auth() fails.tobhe
2020-11-12Fail if ikev2_init_ike_auth() is entered with invalid state.tobhe
2020-11-11Cleanup after proc_init() in proc_close().tobhe
2020-11-09Use RB_FOREACH_SAFE instead of handrolling itTheo Buehler
2020-11-09Check for and handle duplicates on RB_INSERTTheo Buehler
2020-11-09Don't leak domain when freeing block list nodesTheo Buehler
2020-11-07Implement 'from dynamic', which installs flows where 'dynamic' is replacedtobhe
2020-11-07Rework source IP address setting.denis
2020-11-06Remove the -L option. A debugging tool that is no longer required.Kenneth R Westerback
2020-11-06Keep track of allowed ips pointer correctlykn
2020-11-06Add some debug output showing the exact network configurationKenneth R Westerback
2020-11-06Set correct netmask on patched addresses for debug printing.tobhe
2020-11-05Enable support for ASN1_DN ipsec identifiers.Peter Hessler
2020-11-05Handle DNS answers that are larger than the maximum imsg size (aboutFlorian Obser
2020-11-04Add check for static id size.tobhe
2020-11-03Add 'any' keyword for request to allow 'request address any'.tobhe
2020-11-01Add 'dynamic' keyword to configure flows to dynamically assigned addresses.tobhe
2020-10-30Add missing bits to make 'request addr 0.0.0.0' accept ANY dynamic address.tobhe
2020-10-30style(9)tobhe
2020-10-30Track creation time of address proposals to be able to establish totalFlorian Obser
2020-10-30If Duplicate Address Detection (DAD) fails only generate a new addressFlorian Obser
2020-10-30Follow RFC 4941 and calculate the desync_factor at startup.Florian Obser
2020-10-30Since the RFC 4941 constants are no longer in a public headerFlorian Obser
2020-10-30Pull check for duplicate address up to skip them early, we are notFlorian Obser
2020-10-30update_iface_ra does too much, move prefix handling into function.Florian Obser
2020-10-30update_iface_ra does too much, move dfr handling into function.Florian Obser
2020-10-30update_iface_ra does too much, move rdns handling into function.Florian Obser
2020-10-30Source address set can be printeddenis
2020-10-30Do not use ".Ar device" for both an option argument and for the operand.Ingo Schwarze
2020-10-30Whitespace fixes.tobhe
2020-10-30Fix key payload size. Use size from new SA.tobhe
2020-10-29Add initial support to request IP addresses as IKEv2 initiator.tobhe
2020-10-29Add feature to force the selection of source IP addressdenis
2020-10-29Add some documentation about the cachingsolene
2020-10-28Refactor parts of the dh_* API.tobhe
2020-10-28Update to libunbound 1.12.0; heavy lifting by sthenFlorian Obser
2020-10-24Don't modify sa in ikev2_pld_cp. Store cp_type in msg until message hastobhe
2020-10-22Handle NO_PROPOSAL_CHOSEN for initiator in IKE_SA_INIT exchange.tobhe
2020-10-22Add missing break.tobhe
2020-10-21Remove SAs from ike_dstid_sas on 'ikectl reset sa' to prevent use after free.tobhe
2020-10-21ICMP raw sockets start to receive packets as soon as they are createdFlorian Obser