wireguard-openbsd/sbin/ipsecctl/ipsecctl.c, branch jd/queueboosts

Remove unnused af argument from unmask(), sync with pfctl

2018-09-07T12:43:30Z

Noted by jca, thanks. OK jca claudio

Support collapsing flow outputs.

2017-11-20T10:51:24Z

Makes it easier to check live status of complex setups. ok hshoexer@

Rename all SA groups to bundles consistently. The first kernel

2017-04-19T15:59:38Z

commit in 2000 that introduced the features already called them SA bundles. The word group is taken by Diffie-Hellman, reusing it causes confusion. OK hshoexer@

Now that the kernel provides information about IPsec SA bundles,

2017-03-02T17:44:32Z

print them by default. OK hshoexer@

Remove NULL-checks before free(). ok tb@

2015-12-10T17:26:59Z

Replace with and other less dirty headers where

2015-01-16T06:39:28Z

possible. Annotate lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)

Yet more #include de-duplication.

2014-11-20T14:51:41Z

ok deraadt@ tedu@

don't output "esn" string in the rule section as we can't use the

2012-07-05T09:02:20Z

keyword in the grammar to create a esn-enabled rule (no reason to do so for manual sa configuration). instead decode sa flags so that we can also watch changes happening in the realtime with the monitor mode. prompted and ok by naddy

Print esn flag when dumping SAs with ESN enabled

2012-06-29T15:01:07Z

- put -i in the right place

2011-11-08T16:49:32Z

- prevent an erroneous space in the formatting of -D