summaryrefslogtreecommitdiffstats
path: root/sbin/ipsecctl/ipsec.conf.5
AgeCommit message (Expand)AuthorFilesLines
2020-02-16Quote variables in pf tag stringskn1-4/+5
2020-02-10briefly mention /etc/examples/ in the FILES section of all theschwarze1-2/+7
2020-02-07Extend the ipsecctl(8) parser to set the udpencap flag and portbluhm1-2/+6
2019-11-10Consistently use _rcctl enable foo_ in examples, it's simpler and lesslandry1-14/+21
2018-04-17Document how to avoid isakmpd(8) source IP address pitfalls by usingstsp1-3/+12
2017-11-23in isakmpd(8), provide a hint: from scott chelohajmc1-5/+3
2017-10-27Support DH groups 19 to 21 and 25 to 30, just like iked(8) does.mpi1-2/+11
2017-04-14Up to now ipsecctl(8) grouped SAs with identical src and dst to thebluhm1-2/+11
2015-12-09Remove plain DES encryption from IPsec.naddy1-8/+3
2015-11-01replace "can not" with "cannot";jmc1-3/+3
2015-05-25bump up the default Diffie-Hellman group to modp3072; ok mikeb@ djm@naddy1-3/+3
2015-02-28Reduce usage of predefined strings in manpages.bentley1-3/+3
2015-01-10tell the truth about DES.sobrado1-4/+4
2015-01-02PFS stands for Perfect Forward Secrecy.sobrado1-3/+3
2014-03-19Unify ipsec.conf(5)'s copy of the text dealing with multiline comments,sthen1-9/+9
2013-11-01altq -> new queue in exampleshenning1-11/+10
2013-06-29do not use Sx for sections outwith the page;jmc1-5/+3
2012-08-12Explicitly state that only two unit specifiers are recognized instead oflteo1-5/+5
2012-07-13small tweak;jmc1-2/+2
2012-07-13Change the configuration format fed to the isakmpd FIFO to be ablemikeb1-10/+29
2012-07-08Disallow manual security associations that use AES-CTR, AES-GCM,naddy1-14/+14
2012-06-30enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPnaddy1-3/+6
2012-04-24take a stab at documenting when arguments need quoted, and valid macrojmc1-4/+7
2011-11-13provide a specific section reference; from Lawrence Teojmc1-3/+4
2011-09-03make -column lists pretty again;jmc1-30/+30
2011-08-19as with other list types, column lists generally do not need a Pp/-compactjmc1-8/+5
2011-07-07We can mention ipcomp, since it worksderaadt1-5/+5
2011-06-24wrap previous onto a second linesthen1-2/+3
2011-06-24nat-to rules require a directionsthen1-3/+3
2010-10-06Retire Skipjackmikeb1-7/+4
2010-09-23change description for AES-GMAC a bit.mikeb1-6/+3
2010-09-22Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMACmikeb1-2/+12
2010-09-19more wacky macro fixing;jmc1-3/+3
2010-06-07fix a quoting wobble for the srcnat keyword; verified by reykjmc1-3/+3
2010-06-03update the manpages for isakmpd(8) and ipsec.conf(5) to point to iked(8)reyk1-5/+9
2010-01-02Various syntax errors in list headers, found by mandoc(1),schwarze1-3/+3
2009-10-21nat -> match...nat-to in example PF rule. ok mpf@sthen1-3/+3
2009-01-29tweak previous;jmc1-3/+3
2009-01-28Allow to specify ike and flow explicitly without peer. The anybluhm1-4/+14
2009-01-20Add support to isakmpd(8) and ipsecctl(8) to install SA's with ampf1-3/+45
2008-11-29Explain how /32 changes the address type to IPV4_ADDR_SUBNET. From Mitjahshoexer1-2/+7
2008-04-11add support for the "include" directive using code from pfctl/parse.y.reyk1-2/+9
2008-02-22Support for specifying aes-{128,192,256}. Originial idea by Prabhuhshoexer1-2/+5
2008-02-12document modifier types; requested by Aurelienjmc1-14/+28
2007-09-17Document the syntax used with manual SAs for automatic creationsthen1-6/+10
2007-05-31convert to new .Dd format;jmc1-2/+2
2007-03-06Explain, why aesctr has 160 bit keys (128 bit aes key + 32 bit nonce).hshoexer1-3/+7
2007-02-19tweak;jmc1-2/+2
2007-02-19Document NULL encryption.hshoexer1-1/+5
2007-02-16Address PR 5380: refer to DH MODP well-known group numbers.cloder1-9/+9