summaryrefslogtreecommitdiffstats
path: root/sbin/iked
AgeCommit message (Expand)AuthorFilesLines
2020-06-18Fix handling of short EAP-MSCHAP messages.tobhe1-14/+25
2020-06-17Fix length check in ca_getreq().tobhe1-5/+14
2020-06-15Log errors with log_info and SPI prepended.tobhe1-9/+15
2020-06-09Move AUTH_REQUEST SA state change from parser to IKE_AUTH exchange handler.tobhe2-11/+12
2020-06-05Add default proposals for AES-GCM ciphers in IKE and ESP.tobhe1-57/+182
2020-06-03Pass sockaddr instead of sockaddr_storage to sa_address.tobhe3-14/+16
2020-06-02Don't leak authmsg.tobhe1-1/+3
2020-05-30Indentation style(9).tobhe1-11/+11
2020-05-28Move duplicate SA negotiation code to ikev2_sa_negotiate_common().tobhe1-88/+40
2020-05-26Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.tobhe8-85/+366
2020-05-14Stricter return value checking for EVP_Cipher* calls.tobhe3-31/+48
2020-05-13Remove unnecessary logging messages.tobhe1-5/+2
2020-05-13Remove dead 'iked_flow' member 'flow_type'.tobhe2-16/+5
2020-05-11Fix policy lookup edge case for simultaneous transport and tunnel mode SAs.tobhe3-27/+47
2020-05-09Log error notifications other than NO_PROPOSAL_CHOSENtobhe1-1/+3
2020-05-08Remove unneccessary X509_NAME_oneline wrapper. Passing NULL as buftobhe2-17/+3
2020-05-02Use gettimeofday() instead of CLOCK_MONOTONIC in gettime(). The return valuetobhe1-5/+4
2020-05-01When initiating IKE SA rekeying, make sure to send a key from a mutualtobhe1-7/+10
2020-05-01Clarify global 'set active' and 'set passive' options and how theytobhe1-6/+18
2020-04-30Add ECDH groups and higher order MODP DH groups to default proposal.tobhe1-1/+7
2020-04-29Remove trailing tabtobhe1-2/+2
2020-04-29Missing whitespace.tobhe1-2/+2
2020-04-28The order of arguments to proposals_negotiate makes a difference.tobhe1-3/+3
2020-04-28Remove support for insecure EC2N groups. Clarify which Diffie-Hellmantobhe5-27/+15
2020-04-27Add curve25519 IANA group number.tobhe1-3/+3
2020-04-27Log with SPI_SA().tobhe1-4/+5
2020-04-26Fix leak of temporary ID ibufs on IKE SA rekey.tobhe1-1/+5
2020-04-26Only print valid rdomains. '-1' is used as default value and shouldtobhe1-2/+2
2020-04-24Add some useful log messages for the IKE handshake.tobhe1-2/+5
2020-04-24Log INFORMATIONAL messages with LOG_DEBUG. They are rarely useful fortobhe2-4/+9
2020-04-23 ce examples of "Ar arg Ar arg" with "Ar arg arg" and stop the spread;jmc1-2/+2
2020-04-23Add support for switching rdomain on IPsec encryption/decryption.tobhe6-18/+151
2020-04-22Fix leaks in signature validation.tobhe1-1/+5
2020-04-22Log authentication verification failure with "info" priority.tobhe1-2/+3
2020-04-20Remove unused 'dsa_cert' variable.tobhe2-8/+2
2020-04-18SPI_SA(sa, NULL) already prints a colon.tobhe1-2/+2
2020-04-17Log retransmits of sent requests and responses.tobhe1-2/+15
2020-04-16Print SPI value of deleted SA.tobhe1-4/+15
2020-04-15Remove redundant 'sa == NULL' check.tobhe1-2/+2
2020-04-14Print 'ipcomp' in print_policy() if configured.tobhe1-1/+4
2020-04-13Try to send a DELETE message if the SA is reset with 'ikectl reset id'.tobhe3-5/+25
2020-04-12No need to call lc_idtype(). idstr does not contain a leading typetobhe1-2/+1
2020-04-12"could not open public key" is an error and should be log_info.tobhe1-2/+2
2020-04-11DELETE payloads are common. Log with log_info instead of log_warnx.tobhe1-2/+2
2020-04-11If we haven't received any IKE message from our partner for sometobhe2-7/+34
2020-04-10Only make the type part of the idstring lowercase when looking for certs intobhe4-9/+9
2020-04-09Simplify socket creation logic. Normally iked needs two sockets, onetobhe6-36/+52
2020-04-08Prevent multiple ibuf leaks. Clean up on proccess shutdown.tobhe6-8/+42
2020-04-07Always prefer generic signature authentication (RFC 7427) , not just for RSA.tobhe1-3/+18
2020-04-06Fix pubkey leak in CA process for ASN1_DN IDs.tobhe1-6/+13
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.