wireguard-openbsd/sbin/iked, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/sbin/iked?h=jd%2Fqueueboosts 2020-06-18T19:55:03Z Fix handling of short EAP-MSCHAP messages. 2020-06-18T19:55:03Z tobhe tobhe@openbsd.org 2020-06-18T19:55:03Z urn:sha1:185e6e5cbce5452a99de362c9ec5b58c95bb86d2 ok patrick@ Fix length check in ca_getreq(). 2020-06-17T19:41:04Z tobhe tobhe@openbsd.org 2020-06-17T19:41:04Z urn:sha1:dc16ec330be59bc43d033b4e701c6d50d36e0510 ok patrick@ Log errors with log_info and SPI prepended. 2020-06-15T18:37:37Z tobhe tobhe@openbsd.org 2020-06-15T18:37:37Z urn:sha1:e47d40c970ac6c20fa6ba7b17c3cff97d9ffe179 Move AUTH_REQUEST SA state change from parser to IKE_AUTH exchange handler. 2020-06-09T21:53:26Z tobhe tobhe@openbsd.org 2020-06-09T21:53:26Z urn:sha1:015b53db235c7fe9bbcb2c22df04dc3a8d503f7f ok patrick@ Add default proposals for AES-GCM ciphers in IKE and ESP. 2020-06-05T14:47:26Z tobhe tobhe@openbsd.org 2020-06-05T14:47:26Z urn:sha1:89f5c52562156e99041ddebdcee64c92dba70633 ok patrick@ Pass sockaddr instead of sockaddr_storage to sa_address. 2020-06-03T17:56:42Z tobhe tobhe@openbsd.org 2020-06-03T17:56:42Z urn:sha1:2f3a6dc6e9c422269c726b1ae0c0ee522164baae ok patrick@ Don't leak authmsg. 2020-06-02T19:37:47Z tobhe tobhe@openbsd.org 2020-06-02T19:37:47Z urn:sha1:bff00a46ae6a400028d866fb72ab5774fa0bb3fd ok patrick@ Indentation style(9). 2020-05-30T17:44:35Z tobhe tobhe@openbsd.org 2020-05-30T17:44:35Z urn:sha1:90b5000533871c94033f63da2679487a75eb627c Move duplicate SA negotiation code to ikev2_sa_negotiate_common(). 2020-05-28T19:09:31Z tobhe tobhe@openbsd.org 2020-05-28T19:09:31Z urn:sha1:0ba36704ceb39e1c0430aa109961cb626aa45608 ok patrick@ Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2. 2020-05-26T20:24:31Z tobhe tobhe@openbsd.org 2020-05-26T20:24:31Z urn:sha1:15863c3aa5cc846f5fa06f4b927df4a984e4b770 They can be configured with the new ikesa enc options aes-128-gcm, aes-256-gcm, aes-128-gcm-12 and aes-256-gcm-12. Tested with Strongswan by Stephan Mendling and myself Tested with Juniper SRX by remi@ ok sthen@, patrick@