| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2020-06-05 | Add default proposals for AES-GCM ciphers in IKE and ESP. |   tobhe | 1 | -57/+182 |
| 2020-05-26 | Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2. | tobhe | 1 | -6/+37 |
| 2020-04-30 | Add ECDH groups and higher order MODP DH groups to default proposal. | tobhe | 1 | -1/+7 |
| 2020-04-29 | Remove trailing tab | tobhe | 1 | -2/+2 |
| 2020-04-29 | Missing whitespace. | tobhe | 1 | -2/+2 |
| 2020-04-28 | Remove support for insecure EC2N groups. Clarify which Diffie-Hellman | tobhe | 1 | -5/+1 |
| 2020-04-26 | Only print valid rdomains. '-1' is used as default value and should | tobhe | 1 | -2/+2 |
| 2020-04-23 | Add support for switching rdomain on IPsec encryption/decryption. | tobhe | 1 | -9/+26 |
| 2020-04-14 | Print 'ipcomp' in print_policy() if configured. | tobhe | 1 | -1/+4 |
| 2020-04-12 | No need to call lc_idtype(). idstr does not contain a leading type | tobhe | 1 | -2/+1 |
| 2020-04-10 | Only make the type part of the idstring lowercase when looking for certs in | tobhe | 1 | -2/+2 |
| 2020-03-28 | Plug some memory leaks. | tobhe | 1 | -1/+14 |
| 2020-02-21 | Add transport mode for child SAs. This is useful for GRE over IPsec and | tobhe | 1 | -3/+13 |
| 2019-12-03 | Correctly represent flows as traffic selectors as described in RFC 7296. This | tobhe | 1 | -24/+28 |
| 2019-11-28 | Merge host_v{4,6}() into host_ip(), simplify host() |   kn | 1 | -85/+28 |
| 2019-11-28 | Introduce copy_sockaddrtoipa() and set_ipmask() bits from pfctl | kn | 1 | -14/+21 |
| 2019-11-12 | Add configuration options to explicitly specify ESN support for child SAs. | tobhe | 1 | -3/+42 |
| 2019-09-26 | Fix leaks by cleaning up after configuration parser. | tobhe | 1 | -6/+38 |
| 2019-08-26 | Fix file descriptor leak in config parser. Inspired by bgpd parse.y. | tobhe | 1 | -14/+15 |
| 2019-08-16 | Fix segfault in parser when specifying an invalid transform. | tobhe | 1 | -5/+13 |
| 2019-06-28 | When system calls indicate an error they return -1, not some arbitrary |   deraadt | 1 | -4/+4 |
| 2019-05-11 | Add support for IKEv2 Message Fragmentation as defined in RFC 7383. |   patrick | 1 | -1/+10 |
| 2019-04-02 | When curve25519 was added to iked, it was based on the internet-draft and |   sthen | 1 | -2/+2 |
| 2019-02-13 | (unsigned) means (unsigned int) which on ptrdiff_t or size_t or other | deraadt | 1 | -3/+3 |
| 2018-11-07 | sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@ |   miko | 1 | -7/+3 |
| 2018-11-01 | - odd condition/test in PF lexer |   sashan | 1 | -2/+3 |
| 2018-07-11 | Do for most running out of memory err() what was done for most running |   krw | 1 | -25/+25 |
| 2018-07-09 | No need to mention which memory allocation entry point failed (malloc, | krw | 1 | -6/+6 |
| 2018-07-08 | Be consistent in warn() and log_warn() usage when | krw | 1 | -3/+3 |
| 2018-06-11 | Fix an off-by-one line count when using include statements. |   denis | 1 | -47/+78 |
| 2018-04-26 | Plug leak in error case of the common 'varset' implementations. | krw | 1 | -1/+3 |
| 2018-01-31 | Add support for specifying multiple transforms within a single proposal. | patrick | 1 | -77/+120 |
| 2018-01-24 | Implement support for specifying multiple proposals. This means we can | patrick | 1 | -101/+173 |
| 2017-12-01 | The RFC specifies that in an SA payload the proposals must be numbered | patrick | 1 | -3/+6 |
| 2017-11-27 | Implement MOBIKE (RFC 4555) support in iked(8), with us acting as | patrick | 1 | -2/+9 |
| 2017-11-15 | Reset the OCSP URL on config reload. Otherwise we end up not being | patrick | 1 | -1/+4 |
| 2017-04-24 | Fix configuration of ASN1_DN IDs. |   reyk | 1 | -2/+6 |
| 2017-03-28 | Remove RSA from the list of keywords, lookup is now done in a table. | reyk | 1 | -3/+2 |
| 2017-03-27 | Factor out flows into separate configuration messages |   mikeb | 1 | -1/+2 |
| 2017-03-27 | Add support for RFC4754 (ECDSA) and RFC7427 authentication. | reyk | 1 | -32/+191 |
| 2017-01-20 | Check bounds of the flows array when configuring traffic selectors | mikeb | 1 | -4/+13 |
| 2017-01-05 | Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQ | krw | 1 | -5/+7 |
| 2017-01-04 | Remove modular exponential groups specified in RFC5114 | mikeb | 1 | -8/+1 |
| 2016-09-03 | Add the missing bits to have NAT on enc(4) support in iked. |   vgross | 1 | -2/+13 |
| 2016-08-06 | Unbreak PSK authentication, broken by previous. |   pascal | 1 | -2/+1 |
| 2016-07-20 | When parsing the configuration. initialize the auth structure | reyk | 1 | -1/+5 |
| 2016-06-21 | do not allow whitespace in macro names, i.e. "this is" = "a variable". |   benno | 1 | -1/+9 |
| 2015-12-09 | Remove plain DES encryption from IPsec. |   naddy | 1 | -2/+1 |
| 2015-11-04 | Support Chacha20-Poly1305 for Child SAs; ok reyk | mikeb | 1 | -1/+3 |
| 2015-10-31 | RFC4754 specifies ECDSA-521 (sic), not -512. ok reyk@ | naddy | 1 | -2/+2 |
