wireguard-openbsd/sbin/iked/control.c, branch jd/queueboosts

Don't fallthrough in IMSG_CTL_RESET_ID case.

2020-04-03T08:20:32Z

From Wataru Ashihara ok patrick@

Add 'ikectl show sa' command to print information about the state of

2020-03-22T15:59:05Z

negotiated IKE SAs, their Child SAs and resulting IPsec flows. ok patrick@

Add 'ikectl reset id ' command to reset all SAs from policies with

2020-03-18T22:12:43Z

matching destination ID. ok patrick@ markus@

Remove cpath pledge(2) promise. We decided that not deleting the unix control

2018-08-06T06:30:06Z

sockets cause no harm and this way we close another attack surface by not allowing the daemon to create/delete any more files. OK kn@

Nuke some whitespace that keeps poking me in the eye as I try to

2017-01-17T22:10:55Z

steal code.

Stop accessing verbose and debug variables from log.c directly.

2017-01-09T14:49:21Z

This replaces log_verbose() and "extern int verbose" with the two functions log_setverbose() and log_getverbose(). Pointed out by benno@ OK krw@ eric@ gilles@ (OK gilles@ for the snmpd bits as well)

Replace hand-rolled for(;;) traversal of ctl_conns TAILQ with

2017-01-09T14:04:31Z

TAILQ_FOREACH(). No intentional functional change. ok reyk@

Forward IMSG_CTL_VERBOSE via the parent; this fixes a crash when doing

2016-09-04T16:55:43Z

"ikectl log verbose" and keeps the control process separated from the cert process. Thanks for the bug report to Wouter Clarie OK vgross@

EAGAIN handling for imsg_read. OK henning@ benno@

2015-12-05T13:09:46Z

Replace socket_set_blockmode() and fcntl(fd, F_SETFL, O_NONBLOCK) calls

2015-11-23T19:28:33Z

with the SOCK_NONBLOCK flag to socket() and accept4(). OK claudio@ jung@