summaryrefslogtreecommitdiff
path: root/usr.sbin/ikectl
AgeCommit message (Expand)Author
2014-08-26Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is notJoel Sing
2014-08-25Delete secret or secret-derived data with explicit_bzero.Doug Hogan
2014-07-20Make sure the correct errno is reported by warn* or err* and notPhilip Guenther
2014-04-18round up some enemy sympathizers found calling RAND_seed().Ted Unangst
2014-01-18Remove -Wbounded: it is now the compiler default.Martynas Venckus
2013-11-14cope with the EAGAIN API change for msgbuf_write()Theo de Raadt
2013-08-16Use %lld and cast to (long long) when printing time_t valuesPhilip Guenther
2013-07-16use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@Ingo Schwarze
2013-01-08Remove private CVS tag from an obsolete repository and bump copyrightReyk Floeter
2012-12-08don't forget to include a path separator after an SSLDIR;Mike Belopuhov
2012-11-01Remove dead code that was a leftover from the initial code which wasReyk Floeter
2012-10-25Remove support email address from the example that is intended forReyk Floeter
2012-10-23Allow to overwrite a few more definitions like file paths from theReyk Floeter
2012-09-18update email addresses to match reality.Reyk Floeter
2012-07-08if you use nitems() in userland, you must define it yourselfTheo de Raadt
2012-05-02s/snmpd/iked/ in commentGleydson Soares
2011-05-27spacingReyk Floeter
2011-01-20more double word removal;Jason McIntyre
2010-10-11and another one... s/10.4.5.6/10.3.4.5/, also from jy-p.Stuart Henderson
2010-10-11typo, s/10.1.2.3/10.2.3.4/, from jy-pStuart Henderson
2010-10-08set the client/server certificate options with all the common keyusageReyk Floeter
2010-10-08check if a directory exists before trying to create it in the exportJonathan Gray
2010-10-08tweak for nroffJonathan Gray
2010-10-08if non absolute paths are specified in install commands assume theyJonathan Gray
2010-10-08allow optional paths for the install commands so we canJonathan Gray
2010-10-08Allow to show certificate details (show ca x cert [y]).Reyk Floeter
2010-10-07only try to setup a passfile when creating a CAJonathan Gray
2010-10-07Allow to specify the export password on the command line (optionally, forReyk Floeter
2010-10-07sync usage();Jason McIntyre
2010-10-07nroff doesn't like long argument lists that work fine with mandoc.Reyk Floeter
2010-10-07- add a -q (quiet) command line option that will be used by ikeca toReyk Floeter
2010-10-07set saner permissions on the directory we export, so we don't changePeter Hessler
2010-10-07When we create a new CA, also create an empty (but valid) CRL list.Peter Hessler
2010-10-01tweak previous;Jason McIntyre
2010-09-30Add jsg@ to the AUTHORS section of ikectl; he wrote the CA/PKI part.Reyk Floeter
2010-09-30Add some examples about using the CA commands to create and install theReyk Floeter
2010-06-23fix the permissions on directories inside the exported tarballJonathan Gray
2010-06-23More appropriate contents for the exported ca tarball.Jonathan Gray
2010-06-23Add a ca export command for EAP mode where we only require the CA cert,Jonathan Gray
2010-06-21use the full path to zipJonathan Gray
2010-06-15fix an mdoc macroJonathan Gray
2010-06-14Add commands to create/delete/install/import keys withoutJonathan Gray
2010-06-10Add a command to revoke a certificate and generate a CRL;Jonathan Gray
2010-06-10add new commands: the couple/decouple commands will set loading of theReyk Floeter
2010-06-07switch iked pki files to /etc/iked, discussed with reyk.Jonathan Gray
2010-06-04Install the cert as well as the keys and make certs worldJonathan Gray
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter