| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2014-02-27 | From Adam Majer <adamm@zombino.com>: Support IPv6 in X509 subjectAltName | tteras | |
| 2013-10-20 | remove unused variables | christos | |
| 2013-07-20 | Use Mt for email addresses. | wiz | |
| 2013-07-19 | From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Export phase1 | tteras | |
| remote address as Radius Calling-Station-Id. | |||
| 2013-07-18 | add RTM_LOSING, RTM_REDIRECT | christos | |
| 2013-07-12 | From Sven Vermeulen <sven.vermeulen@siphos.be>: Moves ploginit() up, | tteras | |
| allowing logging events from init_avc() to show up as well. | |||
| 2013-06-20 | Add an option --enable-wildcard-match to enable wildcard matching and explain | christos | |
| why we might want it and why it is a bad idea in general that's why it is not enabled by default. ok tteras@, manu@ | |||
| 2013-06-18 | From Paul Barker: Remove redundant memset after calloc that caused compile | tteras | |
| failures with gcc 4.8 due to error: argument to 'sizeof' in 'memset' call is the same expression as the destination; did you mean to dereference. | |||
| 2013-06-14 | Accept - as stdin | christos | |
| Be nice and let the user know which file it could not open. | |||
| 2013-06-03 | From Alexander Sbitnev <alexander.sbitnev@gmail.com>: fix admin port | tteras | |
| establish-sa for tunnel mode SAs. | |||
| 2013-05-23 | From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Fix | tteras | |
| SADB_X_EALG_CASTCBC definition to use system definition (which differs at least on Linux). ------------------------ | |||
| 2013-05-08 | racoon default config is in /etc/racoon/racoon.conf | mbalmer | |
| 2013-04-12 | From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Do not send out | tteras | |
| illegal zero length MODE_CFG attributes. | |||
| 2013-04-12 | Some logging improvements. | tteras | |
| 2013-02-05 | Fix source port selection | tteras | |
| 2013-02-05 | From Ian West <ian@niw.com.au>: Fix double free of the radius info on | tteras | |
| config reload. | |||
| 2013-01-24 | Fix handling of deletion notification. | tteras | |
| 2013-01-08 | Don't derefence the directory symlink which we might be recreating. | tteras | |
| 2012-12-24 | From Götz Babin-Ebell <g.babin-ebell@novamedia.de>: Smarter X.509 subject | tteras | |
| name compare. | |||
| 2012-12-24 | From Götz Babin-Ebell <g.babin-ebell@novamedia.de: | tteras | |
| Require OpenSSL 0.9.8s or higher | |||
| 2012-11-30 | Bump date for previous. | wiz | |
| 2012-11-29 | Added support for AES GCM 16 in phase2 negociations. Code from Christophe ↵ | vanhu | |
| Carre / NETASQ | |||
| 2012-08-29 | From Roman Hoog Antink <rha@open.ch>: Accept DPD messages with cookies | tteras | |
| also in reversed order for compatiblity. At least Cisco 836 running IOS 12.3(8)T does this. | |||
| 2012-08-29 | From Roman Hoog Antink <rha@open.ch>: add remote's IP address to the | tteras | |
| "certificate not verified" error message. | |||
| 2012-08-29 | From Roman Hoog Antink <rha@open.ch>: do not print unnecessary warning | tteras | |
| about non-verified certificate when using raw plain-rsa. | |||
| 2012-08-15 | Fix make test on powermac G5. Patch from Nakano Takaharu | manu | |
| 2012-02-18 | Bump date for previous. | wiz | |
| 2012-02-18 | mention esp-udp | drochner | |
| 2012-02-13 | Use the correct constant. | wiz | |
| From FreeBSD via Henning Petersen in PR 46005. | |||
| 2012-01-26 | Bump date for previous. | wiz | |
| 2012-01-26 | also mention the aes-gcm ESP variants | drochner | |
| 2012-01-10 | From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Enhance splitnet | tteras | |
| environment variable string value generation. | |||
| 2012-01-09 | Bump date for previous. | wiz | |
| 2012-01-09 | allow setkey(8) set and display the ESP fragment size in the NAT-T case, | drochner | |
| userland part of PR kern/44952 by Wolfgang Stukenbrock, just changed the "frag" option name to "esp_frag", for consistency to the existing option of similar effect in racoon(8) | |||
| 2012-01-04 | Bump date for previous. | wiz | |
| 2012-01-04 | include <netipsec/ipsec.h> rather than <netinet6/ipsec.h> from userland | drochner | |
| where possible, for consistency and compatibility to FreeBSD (exception: KAME specific statistics gathering in netstat(1) and systat(1)) | |||
| 2012-01-04 | -consistently use "char *" for the compiled policy buffer in the | drochner | |
| ipsec_*_policy() functions, as it was documented and used by clients -remove "ipsec_policy_t" which was undocumented and only present in the KAME version of the ipsec.h header -misc cleanup of historical artefacts, and to remove unnecessary differences between KAME ans FAST_IPSEC | |||
| 2012-01-01 | From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Fix one byte too | tteras | |
| short memory allocation in isakmp_unity.c:splitnet_list_2str(). | |||
| 2012-01-01 | From Wolfgang Schmieder <wolfgang@die-schmieders.de>: Fix default NAT-T | tteras | |
| port for listen { isakmp_natt } config directive. | |||
| 2012-01-01 | From Wolfgang Schmieder <wolfgang@die-schmieders.de>: Fix various typos in | tteras | |
| comments and log messages. Fix default port used in copy_ph1addresses(). | |||
| 2012-01-01 | Fix myaddr_getsport() to return -1 if no suitable address is found. This is | tteras | |
| used in pfkey.c:pk_recvacquire() to check if IKE negotiation should be started or not. | |||
| 2012-01-01 | Fix the previous commit. | tteras | |
| 2012-01-01 | From Wolfgang Schmieder <wolfgang@die-schmieders.de>: Fix memory leaks from | tteras | |
| configuration reading code, and clean up error handling. | |||
| 2011-11-17 | fixed some crashes in LIST_FOREACH where current element could be removed ↵ | vanhu | |
| during the loop | |||
| 2011-11-15 | Bump date for new tls option. | wiz | |
| 2011-11-15 | From Vincent Bernat <bernat@luffy.cx>: TLS support for LDAP | tteras | |
| 2011-11-14 | From Marcelo Leitner <mleitner@redhat.com>: do not shrink pfkey socket | tteras | |
| buffers (if system default is larger than what we want as minimum) | |||
| 2011-10-11 | From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Release unused | tteras | |
| phase2 of passive remotes after acquire. | |||
| 2011-10-11 | From Wolfgang Schmieder <wolfgang.schmieder@honeywell.com>: setup phase1 | tteras | |
| port properly. | |||
| 2011-08-19 | Allow inherited remote blocks without additional remote statements to | tteras | |
| be specified in a simpler way. patch by Roman Hoog Antink <rha@open.ch> | |||
