| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | getifaddrs() can return entries where ifa_addr is NULL. Check for this |   benno | 2020-12-29 | 1 | -2/+3 |
| * | Enable support for ASN1_DN ipsec identifiers. |   phessler | 2020-11-05 | 1 | -1/+2 |
| * | Fix "comparison of integers of different signs" warning. |   tobhe | 2020-06-01 | 1 | -3/+3 |
| * | Support SADB_X_EXT_RDOMAIN extension in pfkey dump (-m). | tobhe | 2020-04-23 | 1 | -1/+13 |
| * | Quote variables in pf tag strings |   kn | 2020-02-16 | 1 | -4/+5 |
| * | briefly mention /etc/examples/ in the FILES section of all the |   schwarze | 2020-02-10 | 1 | -2/+7 |
| * | Extend the ipsecctl(8) parser to set the udpencap flag and port |   bluhm | 2020-02-07 | 4 | -18/+65 |
| * | Consistently use _rcctl enable foo_ in examples, it's simpler and less |   landry | 2019-11-10 | 1 | -14/+21 |
| * | Fix file descriptor leak due to popfile() never closing the main config file. | tobhe | 2019-08-26 | 1 | -13/+14 |
| * | snprintf/vsnprintf return < 0 on error, rather than -1. |   deraadt | 2019-07-03 | 1 | -4/+4 |
| * | When system calls indicate an error they return -1, not some arbitrary | deraadt | 2019-06-28 | 1 | -2/+2 |
| * | (unsigned) means (unsigned int) which on ptrdiff_t or size_t or other | deraadt | 2019-02-13 | 1 | -3/+3 |
| * | sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@ |   miko | 2018-11-07 | 1 | -7/+3 |
| * | - odd condition/test in PF lexer |   sashan | 2018-11-01 | 1 | -2/+3 |
| * | Remove unnused af argument from unmask(), sync with pfctl | kn | 2018-09-07 | 1 | -5/+4 |
| * | Display per-TDB counters in verbose mode. |   mpi | 2018-08-28 | 1 | -41/+66 |
| * | Do for most running out of memory err() what was done for most running |   krw | 2018-07-11 | 1 | -51/+51 |
| * | Include <sys/queue.h> instead of relying on kernel headers to include | mpi | 2018-07-10 | 1 | -1/+2 |
| * | No need to mention which memory allocation entry point failed (malloc, | krw | 2018-07-09 | 1 | -5/+5 |
| * | Be consistent in warn() and log_warn() usage when | krw | 2018-07-08 | 1 | -3/+3 |
| * | Plug leak in error case of the common 'varset' implementations. | krw | 2018-04-26 | 1 | -1/+3 |
| * | Document how to avoid isakmpd(8) source IP address pitfalls by using |   stsp | 2018-04-17 | 1 | -3/+12 |
| * | in isakmpd(8), provide a hint: from scott cheloha |   jmc | 2017-11-23 | 1 | -5/+3 |
| * | Support collapsing flow outputs. | mpi | 2017-11-20 | 3 | -12/+207 |
| * | Support DH groups 19 to 21 and 25 to 30, just like iked(8) does. | mpi | 2017-10-27 | 4 | -40/+123 |
| * | Rename all SA groups to bundles consistently. The first kernel | bluhm | 2017-04-19 | 5 | -44/+44 |
| * | use freezero() | deraadt | 2017-04-18 | 1 | -7/+4 |
| * | Up to now ipsecctl(8) grouped SAs with identical src and dst to the | bluhm | 2017-04-14 | 3 | -18/+36 |
| * | Found another len += snprintf... | deraadt | 2017-04-10 | 1 | -3/+8 |
| * | Now that the kernel provides information about IPsec SA bundles, | bluhm | 2017-03-02 | 2 | -7/+38 |
| * | Depending on the addresses, ipsecctl(8) automatically groups sa | bluhm | 2017-02-28 | 2 | -3/+13 |
| * | Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQ | krw | 2017-01-05 | 1 | -5/+7 |
| * | do not allow whitespace in macro names, i.e. "this is" = "a variable". | benno | 2016-06-21 | 1 | -1/+9 |
| * | Remove NULL-checks before free(). ok tb@ |   mmcc | 2015-12-10 | 2 | -36/+19 |
| * | Remove plain DES encryption from IPsec. |   naddy | 2015-12-09 | 6 | -28/+9 |
| * | remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@ | naddy | 2015-12-02 | 1 | -8/+1 |
| * | Decode Chacha20-Poly1305 when dumping SAs; ok reyk, naddy |   mikeb | 2015-11-04 | 3 | -4/+10 |
| * | replace "can not" with "cannot"; | jmc | 2015-11-01 | 1 | -3/+3 |
| * | Use explicit_bzero() when the memory is freed directly afterward. | mmcc | 2015-10-18 | 1 | -4/+4 |
| * | Do not assume that asprintf() clears the pointer on failure, which |   millert | 2015-06-03 | 1 | -6/+7 |
| * | bump up the default Diffie-Hellman group to modp3072; ok mikeb@ djm@ | naddy | 2015-05-25 | 2 | -6/+6 |
| * | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | mikeb | 2015-04-17 | 1 | -2/+1 |
| * | Remove support for storing credentials and auth information in the kernel. | mikeb | 2015-04-14 | 1 | -39/+1 |
| * | Reduce usage of predefined strings in manpages. |   bentley | 2015-02-28 | 1 | -3/+3 |
| * | Replace <sys/param.h> with <limits.h> and other less dirty headers where | deraadt | 2015-01-16 | 3 | -6/+6 |
| * | tell the truth about DES. |   sobrado | 2015-01-10 | 1 | -4/+4 |
| * | PFS stands for Perfect Forward Secrecy. | sobrado | 2015-01-02 | 1 | -3/+3 |
| * | Unbreak the tree. Looks like tedu did not tedu enough when killing KPDK |   claudio | 2014-12-28 | 1 | -3/+1 |
| * | Yet more #include de-duplication. | krw | 2014-11-20 | 1 | -2/+1 |
| * | Don't allow embedded nul characters in strings. |   jsg | 2014-11-20 | 1 | -1/+4 |
