| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2020-02-07 | Extend the ipsecctl(8) parser to set the udpencap flag and port |   bluhm | 1 | -11/+37 |
| 2019-08-26 | Fix file descriptor leak due to popfile() never closing the main config file. |   tobhe | 1 | -13/+14 |
| 2019-02-13 | (unsigned) means (unsigned int) which on ptrdiff_t or size_t or other |   deraadt | 1 | -3/+3 |
| 2018-11-07 | sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@ |   miko | 1 | -7/+3 |
| 2018-11-01 | - odd condition/test in PF lexer |   sashan | 1 | -2/+3 |
| 2018-07-11 | Do for most running out of memory err() what was done for most running |   krw | 1 | -51/+51 |
| 2018-07-09 | No need to mention which memory allocation entry point failed (malloc, | krw | 1 | -5/+5 |
| 2018-07-08 | Be consistent in warn() and log_warn() usage when | krw | 1 | -3/+3 |
| 2018-04-26 | Plug leak in error case of the common 'varset' implementations. | krw | 1 | -1/+3 |
| 2017-10-27 | Support DH groups 19 to 21 and 25 to 30, just like iked(8) does. |   mpi | 1 | -17/+35 |
| 2017-04-19 | Rename all SA groups to bundles consistently. The first kernel | bluhm | 1 | -21/+21 |
| 2017-04-14 | Up to now ipsecctl(8) grouped SAs with identical src and dst to the | bluhm | 1 | -15/+23 |
| 2017-01-05 | Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQ | krw | 1 | -5/+7 |
| 2016-06-21 | do not allow whitespace in macro names, i.e. "this is" = "a variable". |   benno | 1 | -1/+9 |
| 2015-12-09 | Remove plain DES encryption from IPsec. |   naddy | 1 | -2/+1 |
| 2015-11-04 | Decode Chacha20-Poly1305 when dumping SAs; ok reyk, naddy |   mikeb | 1 | -1/+2 |
| 2015-06-03 | Do not assume that asprintf() clears the pointer on failure, which |   millert | 1 | -6/+7 |
| 2014-11-20 | Don't allow embedded nul characters in strings. |   jsg | 1 | -1/+4 |
| 2014-11-04 | Add gcc format attributes to ipsecctl's parse.y. Also, fix a few format |   doug | 1 | -8/+12 |
| 2014-01-22 | relax the cfg file secrecy check slightly to allow group readability |   henning | 1 | -3/+3 |
| 2013-11-25 | use u_char for buffers in yylex, for ctype calls | benno | 1 | -7/+7 |
| 2013-11-22 | Whole bunch of (unsigned char) casts carefully added for ctype calls. | deraadt | 1 | -2/+2 |
| 2012-07-10 | Rename "life" to "lifetime" to match iked. |   lteo | 1 | -31/+56 |
| 2012-07-08 | Disallow manual security associations that use AES-CTR, AES-GCM, | naddy | 1 | -23/+28 |
| 2012-07-07 | copy&paste mistake in error message | naddy | 1 | -3/+3 |
| 2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | naddy | 1 | -1/+4 |
| 2011-12-20 | unsigned long should use "%lu" format; from eric lax, thanks | mikeb | 1 | -3/+3 |
| 2011-07-06 | For non-crypted flows (such as ipcomp and ipip), default their | deraadt | 1 | -2/+14 |
| 2010-10-06 | Retire Skipjack | mikeb | 1 | -2/+1 |
| 2010-09-22 | Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC | mikeb | 1 | -39/+59 |
| 2010-08-03 | fix linecount bug with comments spanning multiple lines | henning | 1 | -3/+4 |
| 2010-05-10 | Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' -> | krw | 1 | -2/+2 |
| 2009-08-04 | Specify an ID-type of IPV4_ADDR or IPV6_ADDR if the srcid or dstid is |   jsing | 1 | -3/+13 |
| 2009-03-31 | Fixed memory leaks which would occur if the second of two memory |   tobias | 1 | -3/+7 |
| 2009-01-30 | If the "peer" address is not specified or derived from "to" for | bluhm | 1 | -7/+67 |
| 2009-01-29 | After checking that peer == NULL do not assign peer = NULL a few | bluhm | 1 | -7/+3 |
| 2009-01-28 | Allow to specify ike and flow explicitly without peer. The any | bluhm | 1 | -13/+32 |
| 2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a |   mpf | 1 | -3/+30 |
| 2008-11-14 | When parsing v4 addresses mark them as network addresses |   hshoexer | 1 | -2/+2 |
| 2008-10-17 | findeol() fix from pfctl | henning | 1 | -3/+5 |
| 2008-07-01 | If a rules contains a hostname instead of an address, use the list | bluhm | 1 | -4/+9 |
| 2008-07-01 | If multiple to addresses but no peer are given in an ike or flow | bluhm | 1 | -41/+58 |
| 2008-06-14 | Move ike and flow peer selection to common function. | bluhm | 1 | -38/+31 |
| 2008-06-11 | trivial code simplification | bluhm | 1 | -5/+3 |
| 2008-04-11 | add support for the "include" directive using code from pfctl/parse.y. |   reyk | 1 | -1/+19 |
| 2008-02-22 | Support for specifying aes-{128,192,256}. Originial idea by Prabhu | hshoexer | 1 | -1/+4 |
| 2007-11-12 | Remove space/tab compression function from lgetc() and replace | mpf | 1 | -10/+2 |
| 2007-10-22 | sync with daemon parser code. |   pyr | 1 | -3/+6 |
| 2007-10-16 | Allow '=' to end a number in all lexers. | mpf | 1 | -2/+2 |
| 2007-10-16 | in the lex... even inside quotes, a \ followed by space or tab should | deraadt | 1 | -2/+4 |
