| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2018-09-07 | Remove unnused af argument from unmask(), sync with pfctl |   kn | 1 | -5/+4 |
| 2017-11-20 | Support collapsing flow outputs. |   mpi | 1 | -8/+196 |
| 2017-04-19 | Rename all SA groups to bundles consistently. The first kernel |   bluhm | 1 | -8/+8 |
| 2017-03-02 | Now that the kernel provides information about IPsec SA bundles, | bluhm | 1 | -4/+1 |
| 2015-12-10 | Remove NULL-checks before free(). ok tb@ |   mmcc | 1 | -31/+16 |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where |   deraadt | 1 | -2/+1 |
| 2014-11-20 | Yet more #include de-duplication. |   krw | 1 | -2/+1 |
| 2012-07-05 | don't output "esn" string in the rule section as we can't use the |   mikeb | 1 | -3/+1 |
| 2012-06-29 | Print esn flag when dumping SAs with ESN enabled | mikeb | 1 | -2/+4 |
| 2011-11-08 | - put -i in the right place |   jmc | 1 | -2/+2 |
| 2011-11-08 | allow the path to isakmpd's fifo to be specified (aka changed) on the |   henning | 1 | -4/+10 |
| 2009-01-27 | A warning text in ipsecctl was used twice. Make the messages unique | bluhm | 1 | -2/+2 |
| 2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a |   mpf | 1 | -1/+3 |
| 2008-07-21 | Free the rules in the rule_queue also if ipsecctl is called with | bluhm | 1 | -7/+13 |
| 2008-07-01 | Isakmpd acquire mode did not work with a config generated from | bluhm | 1 | -1/+3 |
| 2007-10-13 | in all these programs using the same pfctl-derived parse.y, re-unify the | deraadt | 1 | -20/+2 |
| 2007-08-21 | no need to include both sys/types.h and params.h |   hshoexer | 1 | -2/+1 |
| 2007-02-19 | do not display empty authkey/enckey line when -k option is not | hshoexer | 1 | -3/+3 |
| 2007-01-10 | add -k to usage(); | jmc | 1 | -2/+2 |
| 2007-01-03 | do not print secret keys by default, -k restores old behaviour; ok hshoexer |   markus | 1 | -2/+8 |
| 2006-11-30 | handle multiple SAs with different same src/dst but different port; | markus | 1 | -1/+7 |
| 2006-11-10 | When using -vv, also show grouped SAs. | hshoexer | 1 | -1/+19 |
| 2006-11-01 | KNF unrelated to previous commit. |   mcbride | 1 | -2/+2 |
| 2006-11-01 | Add support for aggressive mode (from the k2k6 IPsec hackathon). | mcbride | 1 | -9/+9 |
| 2006-09-19 | sort SAs by spi; ok hshoexer | markus | 1 | -4/+39 |
| 2006-08-31 | Security Association Database is abbreviated 'SAD' (RFC 2401 et al), not 'SADB'. jmc@, hshoexer@ ok. |   ho | 1 | -3/+3 |
| 2006-06-08 | fix usage, make synopsis more pretty. noticed by david@ | hshoexer | 1 | -2/+2 |
| 2006-06-02 | exit(2) when loading of rules did work partially. ok markus@ | hshoexer | 1 | -7/+11 |
| 2006-06-02 | add trailing \ when printing multiple lines for an SA, this way | markus | 1 | -3/+3 |
| 2006-06-02 | allow to specify phase 1 and 2 lifetimes. Right now, these values | hshoexer | 1 | -1/+9 |
| 2006-06-01 | Support flows with port modifiers for proto tcp/udp, e.g. |   naddy | 1 | -1/+23 |
| 2006-06-01 | more to free, needed for SA grouping. | hshoexer | 1 | -7/+13 |
| 2006-06-01 | convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumping | markus | 1 | -2/+1 |
| 2006-06-01 | Prepare for SA grouping. | hshoexer | 1 | -1/+2 |
| 2006-06-01 | correct error messages to match calloc where appropriate |   todd | 1 | -2/+2 |
| 2006-06-01 | rename list link for ipsec_rule structures from "entries" to "rule_entry". | hshoexer | 1 | -4/+4 |
| 2006-05-30 | implement monitor mode for ipsecctl. worked on with markus@ |   msf | 1 | -2/+17 |
| 2006-05-29 | add ipsecctl_free_rule() for cleaning up rules. | hshoexer | 1 | -39/+45 |
| 2006-03-31 | wenn dumping rules always show type, srcid and dstid (if set). | hshoexer | 1 | -12/+9 |
| 2006-03-31 | allow specification of encapsulated protocol for flows; ok hshoexer | markus | 1 | -8/+25 |
| 2006-03-30 | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok hshoexer, reyk | markus | 1 | -1/+13 |
| 2006-03-22 | add support for macros in ipsec.conf(5). some bits have already been |   reyk | 1 | -4/+9 |
| 2006-02-01 | noted by lint: include <string.h> instead of <strings.h>, add tow ARGSUSED1 | hshoexer | 1 | -2/+4 |
| 2006-01-17 | wrap long lines (no binary change) | reyk | 1 | -2/+3 |
| 2006-01-16 | add support for pre-shared keys with "ike esp" using the new keyword | reyk | 1 | -1/+6 |
| 2005-12-06 | more appropriate error messages; ok hshoexer | markus | 1 | -3/+7 |
| 2005-12-06 | ipip support: ip-in-ip w/o gif(4); ok hshoexer | markus | 1 | -3/+3 |
| 2005-12-01 | do not choke and dump core when printing bypass flows. noticed by jacob | hshoexer | 1 | -5/+9 |
| 2005-11-30 | handle that pfkey_ipsec_flush() can fail. | hshoexer | 1 | -2/+3 |
| 2005-11-21 | Fix memory leaks. From Andrey Matveev <evol at online dot ptt dot ru>, | hshoexer | 1 | -1/+5 |
