| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2020-02-07 | Extend the ipsecctl(8) parser to set the udpencap flag and port |   bluhm | 1 | -1/+3 |
| 2017-11-20 | Support collapsing flow outputs. |   mpi | 1 | -1/+4 |
| 2017-10-27 | Support DH groups 19 to 21 and 25 to 30, just like iked(8) does. | mpi | 1 | -3/+5 |
| 2017-04-19 | Rename all SA groups to bundles consistently. The first kernel | bluhm | 1 | -8/+8 |
| 2017-04-14 | Up to now ipsecctl(8) grouped SAs with identical src and dst to the | bluhm | 1 | -1/+2 |
| 2015-12-09 | Remove plain DES encryption from IPsec. |   naddy | 1 | -2/+2 |
| 2015-11-04 | Decode Chacha20-Poly1305 when dumping SAs; ok reyk, naddy |   mikeb | 1 | -2/+2 |
| 2012-07-10 | Rename "life" to "lifetime" to match iked. |   lteo | 1 | -7/+7 |
| 2012-07-08 | Disallow manual security associations that use AES-CTR, AES-GCM, | naddy | 1 | -2/+3 |
| 2012-07-05 | don't output "esn" string in the rule section as we can't use the | mikeb | 1 | -2/+1 |
| 2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | naddy | 1 | -1/+2 |
| 2012-06-29 | Print esn flag when dumping SAs with ESN enabled | mikeb | 1 | -1/+2 |
| 2011-11-08 | allow the path to isakmpd's fifo to be specified (aka changed) on the |   henning | 1 | -2/+2 |
| 2010-10-06 | Retire Skipjack | mikeb | 1 | -2/+2 |
| 2010-09-22 | Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC | mikeb | 1 | -2/+5 |
| 2009-08-04 | Specify an ID-type of IPV4_ADDR or IPV6_ADDR if the srcid or dstid is |   jsing | 1 | -2/+2 |
| 2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a |   mpf | 1 | -1/+3 |
| 2008-07-01 | Isakmpd acquire mode did not work with a config generated from | bluhm | 1 | -1/+2 |
| 2008-02-22 | Support for specifying aes-{128,192,256}. Originial idea by Prabhu |   hshoexer | 1 | -2/+3 |
| 2007-10-13 | in all these programs using the same pfctl-derived parse.y, re-unify the |   deraadt | 1 | -2/+2 |
| 2007-03-16 | move autodetection of the ID type to the parser. this way the |   markus | 1 | -2/+3 |
| 2007-01-03 | do not print secret keys by default, -k restores old behaviour; ok hshoexer | markus | 1 | -1/+2 |
| 2006-11-30 | handle multiple SAs with different same src/dst but different port; | markus | 1 | -1/+4 |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated |   reyk | 1 | -1/+2 |
| 2006-11-01 | Add support for aggressive mode (from the k2k6 IPsec hackathon). |   mcbride | 1 | -5/+12 |
| 2006-06-18 | add group "none"; when choosen, pfs will be disabled. | hshoexer | 1 | -3/+3 |
| 2006-06-02 | print full information about tcpmd5 and ipcomp SAs, too | markus | 1 | -1/+2 |
| 2006-06-02 | allow to specify phase 1 and 2 lifetimes. Right now, these values | hshoexer | 1 | -1/+3 |
| 2006-06-02 | put src and dst host in dedicated structure. Make the API more | hshoexer | 1 | -1/+8 |
| 2006-06-02 | Generalize parsing of main/quick mode specification. Preparation | hshoexer | 1 | -1/+6 |
| 2006-06-02 | Prepare for parsing lifetimes for ike main and quick mode. Not enabled yet. | hshoexer | 1 | -1/+6 |
| 2006-06-01 | Support flows with port modifiers for proto tcp/udp, e.g. | naddy | 1 | -1/+3 |
| 2006-06-01 | convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumping | markus | 1 | -1/+2 |
| 2006-06-01 | Add members dst2, proto2 and spi2 to struct ipsec_rule and define | hshoexer | 1 | -1/+5 |
| 2006-06-01 | Prepare for SA grouping. | hshoexer | 1 | -1/+9 |
| 2006-06-01 | rename list link for ipsec_rule structures from "entries" to "rule_entry". | hshoexer | 1 | -2/+2 |
| 2006-05-31 | white spaces | hshoexer | 1 | -3/+3 |
| 2006-05-30 | implement monitor mode for ipsecctl. worked on with markus@ |   msf | 1 | -1/+2 |
| 2006-05-29 | Need protoype for ipsecctl_free_rule(). While around clean up | hshoexer | 1 | -2/+3 |
| 2006-05-28 | whoops, undo last commit. Of course, set_ipmask() is needed... | hshoexer | 1 | -1/+2 |
| 2006-05-28 | this one not needed yet. | hshoexer | 1 | -9/+3 |
| 2006-05-28 | fill in AF_INET6 cases |   todd | 1 | -1/+2 |
| 2006-05-27 | allow to specify groups to be used IKE | hshoexer | 1 | -1/+6 |
| 2006-03-31 | allow specification of encapsulated protocol for flows; ok hshoexer | markus | 1 | -2/+3 |
| 2006-03-30 | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok hshoexer, reyk | markus | 1 | -1/+2 |
| 2006-03-22 | add support for macros in ipsec.conf(5). some bits have already been | reyk | 1 | -1/+2 |
| 2006-03-07 | add an ike option for road warrior setups (hosts with dynamic ip | reyk | 1 | -2/+2 |
| 2006-01-17 | no , after last element in enum | deraadt | 1 | -2/+2 |
| 2006-01-16 | add support for pre-shared keys with "ike esp" using the new keyword | reyk | 1 | -5/+11 |
| 2005-12-06 | ipip support: ip-in-ip w/o gif(4); ok hshoexer | markus | 1 | -2/+3 |
