| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2017-10-27 | Support DH groups 19 to 21 and 25 to 30, just like iked(8) does. |   mpi | 1 | -18/+72 |
| 2015-12-09 | Remove plain DES encryption from IPsec. |   naddy | 1 | -7/+1 |
| 2015-05-25 | bump up the default Diffie-Hellman group to modp3072; ok mikeb@ djm@ | naddy | 1 | -3/+3 |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where |   deraadt | 1 | -2/+3 |
| 2013-08-25 | the comment that comma characters cannot be used in transform |   mikeb | 1 | -1/+2 |
| 2012-09-17 | unbreak the last commit by making sure that the transform name |   markus | 1 | -7/+14 |
| 2012-09-15 | Encode the transform parameters in the transform name, too. | markus | 1 | -163/+162 |
| 2012-08-30 | Do not issue a spurious "force" when "group none" is specified. | naddy | 1 | -34/+34 |
| 2012-07-13 | Change the configuration format fed to the isakmpd FIFO to be able | mikeb | 1 | -80/+188 |
| 2012-07-10 | Rename "life" to "lifetime" to match iked. |   lteo | 1 | -5/+5 |
| 2012-07-09 | Fix typo in warning message. | lteo | 1 | -2/+2 |
| 2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | naddy | 1 | -1/+10 |
| 2011-11-08 | allow the path to isakmpd's fifo to be specified (aka changed) on the |   henning | 1 | -10/+8 |
| 2010-10-15 | fixup generation of suites string for isakmpd wrt "group none" | mikeb | 1 | -11/+11 |
| 2010-09-22 | Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC | mikeb | 1 | -12/+39 |
| 2009-10-04 | When IKE is operating in dynamic mode and no srcid is given, the hostname |   jsing | 1 | -1/+2 |
| 2009-08-04 | Specify an ID-type of IPV4_ADDR or IPV6_ADDR if the srcid or dstid is | jsing | 1 | -6/+18 |
| 2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a |   mpf | 1 | -66/+65 |
| 2008-07-01 | Isakmpd acquire mode did not work with a config generated from |   bluhm | 1 | -138/+103 |
| 2008-02-22 | Support for specifying aes-{128,192,256}. Originial idea by Prabhu |   hshoexer | 1 | -1/+19 |
| 2008-01-04 | Strip off trailing '/32' when address type is IPV4_ADDR as isakmpd does | hshoexer | 1 | -1/+5 |
| 2007-03-16 | move autodetection of the ID type to the parser. this way the | markus | 1 | -18/+4 |
| 2007-02-19 | Bits for ESP+NULL encryption. This is useful, when AH can not be | hshoexer | 1 | -1/+4 |
| 2006-12-18 | call ike_setup_ids from a more appropriate location. |   msf | 1 | -2/+3 |
| 2006-11-30 | typo: wrong rid for protocol | markus | 1 | -2/+2 |
| 2006-11-30 | use rmv to unregister ipsec connections; ok hshoexer, ho | markus | 1 | -1/+14 |
| 2006-11-30 | handle multiple SAs with different same src/dst but different port; | markus | 1 | -161/+177 |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated |   reyk | 1 | -4/+8 |
| 2006-11-24 | fix typo for remote port; from Brian Candler | markus | 1 | -2/+2 |
| 2006-11-21 | do not delete sections that might be shared with other connections | markus | 1 | -1/+7 |
| 2006-11-01 | KNF unrelated to previous commit. |   mcbride | 1 | -3/+5 |
| 2006-11-01 | Add support for aggressive mode (from the k2k6 IPsec hackathon). | mcbride | 1 | -41/+75 |
| 2006-09-18 | KNF and clean some trailing white spaces, no binary change. | hshoexer | 1 | -5/+7 |
| 2006-08-30 | actually use the right value for USER_FQDN | msf | 1 | -2/+2 |
| 2006-08-29 | add support for ufqdn ids in ike rules | msf | 1 | -5/+21 |
| 2006-08-29 | Add support for IKE AH rules to ipsecctl. Man page input by jmc@. | naddy | 1 | -24/+33 |
| 2006-07-21 | When no peer is specified, no peer address is defined, thus do not use it. | hshoexer | 1 | -7/+15 |
| 2006-06-18 | add group "none"; when choosen, pfs will be disabled. | hshoexer | 1 | -2/+5 |
| 2006-06-16 | add a missing "force" | hshoexer | 1 | -2/+3 |
| 2006-06-15 | be careful when touch the peer component of a rule. It is not | hshoexer | 1 | -3/+5 |
| 2006-06-13 | For IKE, allow main mode SHA2 and quick mode AESCTR transforms, | naddy | 1 | -1/+13 |
| 2006-06-10 | switch back to original defaults regarding DH groups. modp3072 is to | hshoexer | 1 | -23/+19 |
| 2006-06-08 | fix some indentation, noticed by david@ | hshoexer | 1 | -2/+2 |
| 2006-06-08 | Add a transport mode specifier to ike rules. Tunnel mode remains the default. | naddy | 1 | -5/+17 |
| 2006-06-08 | allocate enough storage via sockaddr_storage for sockaddr_in6, |   todd | 1 | -16/+17 |
| 2006-06-08 | Fix a typo: When testing for quick mode lifetimes, make sure to | hshoexer | 1 | -2/+2 |
| 2006-06-02 | support tcp/udp port modifiers in ike rules | naddy | 1 | -5/+11 |
| 2006-06-02 | allow to specify phase 1 and 2 lifetimes. Right now, these values | hshoexer | 1 | -1/+7 |
| 2006-06-02 | Simplify main/quick mode parsing and generation of the actual ike config. | hshoexer | 1 | -7/+7 |
| 2006-06-01 | change the local-ID section name to always be unique as we may want to use more than one ISAKMP ID on the local peer. | msf | 1 | -5/+5 |
