| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Extend the ipsecctl(8) parser to set the udpencap flag and port |   bluhm | 2020-02-07 | 1 | -4/+19 |
| * | When system calls indicate an error they return -1, not some arbitrary |   deraadt | 2019-06-28 | 1 | -2/+2 |
| * | Rename all SA groups to bundles consistently. The first kernel | bluhm | 2017-04-19 | 1 | -5/+5 |
| * | use freezero() | deraadt | 2017-04-18 | 1 | -7/+4 |
| * | Depending on the addresses, ipsecctl(8) automatically groups sa | bluhm | 2017-02-28 | 1 | -2/+2 |
| * | Remove NULL-checks before free(). ok tb@ |   mmcc | 2015-12-10 | 1 | -5/+3 |
| * | Remove plain DES encryption from IPsec. |   naddy | 2015-12-09 | 1 | -4/+1 |
| * | Use explicit_bzero() when the memory is freed directly afterward. | mmcc | 2015-10-18 | 1 | -4/+4 |
| * | simple conversion from select() to poll() | deraadt | 2014-11-03 | 1 | -15/+10 |
| * | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | naddy | 2012-06-30 | 1 | -1/+4 |
| * | fix some leaks |   jsg | 2012-03-24 | 1 | -1/+2 |
| * | Retire Skipjack |   mikeb | 2010-10-06 | 1 | -4/+1 |
| * | Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC | mikeb | 2010-09-22 | 1 | -1/+14 |
| * | Only warn about pfkey failures when errno is != EEXIST. |   hshoexer | 2008-12-22 | 1 | -3/+5 |
| * | move autodetection of the ID type to the parser. this way the |   markus | 2007-03-16 | 1 | -3/+3 |
| * | Fix grouping for SAs. Now all combinations of SAs are possible, | hshoexer | 2006-11-10 | 1 | -11/+30 |
| * | can get EAGAIN when writing to the pfkey socket; same change as bgpd, |   henning | 2006-08-30 | 1 | -8/+6 |
| * | fix some indentation, noticed by david@ | hshoexer | 2006-06-08 | 1 | -2/+2 |
| * | pfkey bits needed for SA grouping | hshoexer | 2006-06-01 | 1 | -1/+168 |
| * | Support flows with port modifiers for proto tcp/udp, e.g. | naddy | 2006-06-01 | 1 | -7/+33 |
| * | read the full reply from PFKEY even if sadb_errno is set; ok hshoexer | markus | 2006-06-01 | 1 | -7/+6 |
| * | correct error messages to match calloc where appropriate |   todd | 2006-06-01 | 1 | -3/+3 |
| * | whitespace cleanup | hshoexer | 2006-05-31 | 1 | -3/+3 |
| * | implement monitor mode for ipsecctl. worked on with markus@ |   msf | 2006-05-30 | 1 | -8/+83 |
| * | kill trainling whitespace | hshoexer | 2006-05-28 | 1 | -2/+2 |
| * | fill in AF_INET6 cases | todd | 2006-05-28 | 1 | -20/+71 |
| * | "type" keyword to specify flow type (require, use, etc.) | hshoexer | 2006-04-19 | 1 | -1/+7 |
| * | allow specification of encapsulated protocol for flows; ok hshoexer | markus | 2006-03-31 | 1 | -13/+17 |
| * | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok hshoexer, reyk | markus | 2006-03-30 | 1 | -14/+50 |
| * | add support for special "bypass" and "deny" flows. |   reyk | 2006-03-07 | 1 | -1/+7 |
| * | ipip support: ip-in-ip w/o gif(4); ok hshoexer | markus | 2005-12-06 | 1 | -3/+12 |
| * | Remove old-style keyed sha1/md5. We only support hmac-sha1/md5. | hshoexer | 2005-11-24 | 1 | -7/+1 |
| * | spacing | deraadt | 2005-11-12 | 1 | -7/+7 |
| * | handle transport/tunnel mode | hshoexer | 2005-11-12 | 1 | -5/+9 |
| * | Improved address and address mask handling, derived from pfctl stuff. | hshoexer | 2005-11-06 | 1 | -36/+19 |
| * | better handling of ip addresses, prepare for v6. Partially derived from diff | hshoexer | 2005-11-06 | 1 | -18/+40 |
| * | add support for ipcomp. | hshoexer | 2005-10-30 | 1 | -4/+23 |
| * | parse correctly flows using ipcomp. Glitch noticed by jared rr spiegel. | hshoexer | 2005-10-17 | 1 | -1/+3 |
| * | cleanup messages generated by err(3) | hshoexer | 2005-10-16 | 1 | -15/+15 |
| * | Teach ipsecctl to control isakmpd. | hshoexer | 2005-08-22 | 1 | -5/+5 |
| * | Rewrite handling of transforms. Now both ah and esp can be specified and | hshoexer | 2005-08-09 | 1 | -16/+15 |
| * | pfkey pieces for static keying, enable static keying | hshoexer | 2005-08-08 | 1 | -23/+116 |
| * | prepare for static keying | hshoexer | 2005-08-08 | 1 | -2/+8 |
| * | prepare for authentication and encryption keys, not used yet. | hshoexer | 2005-08-05 | 1 | -3/+3 |
| * | be more careful when using struct ipsec_auth, might be NULL now. | hshoexer | 2005-08-03 | 1 | -1/+15 |
| * | Make use of struct ipsec_auth dynamic. | hshoexer | 2005-08-02 | 1 | -20/+20 |
| * | also bail out when pfkey returns ESRCH (eg. trying to delete a non-existing SA) | hshoexer | 2005-07-09 | 1 | -7/+7 |
| * | small cleanups | hshoexer | 2005-07-09 | 1 | -19/+19 |
| * | Provide infrastructure for adding/deleting SAs, will be used by tcpmd5 and | hshoexer | 2005-07-09 | 1 | -36/+180 |
| * | set flow type (use, require, etc.) when a rule is created. Up to now this was | hshoexer | 2005-07-07 | 1 | -7/+14 |
