index
:
src
cvs/HEAD
kms/intel
kms/radeon
master
OpenBSD base system
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
sbin
Age
Commit message (
Expand
)
Author
2020-04-08
Prevent multiple ibuf leaks. Clean up on proccess shutdown.
tobhe
2020-04-07
Always prefer generic signature authentication (RFC 7427) , not just for RSA.
tobhe
2020-04-06
Fix pubkey leak in CA process for ASN1_DN IDs.
tobhe
2020-04-05
Fix size checks in ikev2_getimsgdata().
tobhe
2020-04-04
It makes no sense to fall back to original policy if the relookup with the
tobhe
2020-04-03
Port set in 'sin_port' should be htons() not ntohs().
tobhe
2020-04-03
Don't fallthrough in IMSG_CTL_RESET_ID case.
tobhe
2020-04-02
Store USE_TRANSPORTMODE in iked_message until the full message was parsed
tobhe
2020-04-02
avoid sys/param.h poisoning, and replace nitems with a local decl
Theo de Raadt
2020-04-01
Properly handle multiple CERTREQ payloads in CA process. Only for the
tobhe
2020-03-31
Log summary of certificates in cert store when iked fails to find a
tobhe
2020-03-30
Log the received cryptographic proposal when the handshake fails because
tobhe
2020-03-30
Log summary of IKE SA for established policy.
tobhe
2020-03-28
Plug some memory leaks.
tobhe
2020-03-28
Move ND6_PRIV_* constants from nd6.h to slaacd the only place where
Florian Obser
2020-03-27
Copy EAP ID to new SA when rekeying IKE SA.
tobhe
2020-03-27
Adjust cert type when choosing public key fallback.
tobhe
2020-03-27
Fix use of 'idstr' and 'idstrlen' arguments in print_static_id().
tobhe
2020-03-25
init(8): use err(3) instead of hand-rolled fprintf(3) messages
cheloha
2020-03-24
Add ikev2_print_static_id() to print static IDs in log_debug() output.
tobhe
2020-03-24
Make our CERTREQ payload handling less strict. If we can not find a
tobhe
2020-03-24
Always clear sa_simult when initiating a new CREATE_CHILD_SA exchange, not
tobhe
2020-03-24
The certreq payload has no use in PSK authenticated exchanges. Once we are
tobhe
2020-03-24
Fix user database corruption from 'ikectl reload'. Copy only the new password
tobhe
2020-03-23
Declare lz_enter_rr_into_zone() static, it's only used in
Florian Obser
2020-03-23
Fix prototype.
Florian Obser
2020-03-23
Update to libunbound 1.10.0
Florian Obser
2020-03-22
Add 'ikectl show sa' command to print information about the state of
tobhe
2020-03-20
Unset 'sa->sa_simult' when the exchange fails with CHILD_SA_NOT_FOUND.
tobhe
2020-03-19
Return when create_solver() returns NULL to prevent null pointer dereference
tobhe
2020-03-18
Add 'ikectl reset id <ID>' command to reset all SAs from policies with
tobhe
2020-03-16
Handle allocation failure in reallocarry. Print errors with log_info.
tobhe
2020-03-16
Correctly calculate IPv6 address leases from small address pools.
tobhe
2020-03-10
Relookup policy based on received cryptographic parameter proposal.
tobhe
2020-03-10
Make sure 'pooladdr' is zero initialized.
tobhe
2020-03-10
Fix memory leak of 'cr' if allocation of 'cr->data' fails.
tobhe
2020-03-10
Make sure ikev2_next_payload() is only called when there is a previous
tobhe
2020-03-10
Return when SA lookup fails in ikev2_init_recv().
tobhe
2020-03-10
Delete dead code in ikev2_msg_valid_ike_sa().
tobhe
2020-03-10
Make sure 'e' is NULL initialized to prevent nullptr dereference in
tobhe
2020-03-09
Use TAILQ_FOREACH_SAFE instead of hand rolled loops.
tobhe
2020-03-03
Teach wsconsctl about rkdrm(4).
Mark Kettenis
2020-03-01
When the proposals are first matched the responder does
tobhe
2020-02-27
Do not set A_JOIN unconditionally. Otherwise join "" takes effect even
Stefan Sperling
2020-02-24
fix column alignment of 'ifconfig joinlist'; padding had an extra " "
Stefan Sperling
2020-02-24
Don't needlessly cap SSID width in 'ifconfig joinlist' (matters with hex SSIDs).
Stefan Sperling
2020-02-24
Clarify that nwid/join SSIDs must be printable ASCII if they're not hex.
Stefan Sperling
2020-02-21
Add transport mode for child SAs. This is useful for GRE over IPsec and
tobhe
2020-02-18
Add IPv6 support to umb(4).
Gerhard Roth
2020-02-17
Do not look for an FFS1 file system at SBLOCK_UFS2. Doing so will
Otto Moerbeek
[next]