chiark / gitweb /
2014-05-15 Ian Improve push rune in release checklist
2014-05-15 Ian Jacksonchangelog, finalise 0.3.1 v0.3.1
2014-05-08 Ian Jacksonchangelog, finalise 0.3.1~beta3 debian/0.3.1_beta3
2014-05-07 Ian pass -Wno-unused-parameter explicitly
2014-05-07 Ian Jacksonnetlink: fix const-correctness of ip_fast_csum fallback
2014-05-03 Ian Jacksonchangelog, finalise 0.3.1~beta2 debian/0.3.1_beta2
2014-05-03 Ian Jacksonnetlink: Generate ICMP correctly if point-to-point
2014-05-03 Ian Jacksonnetlink: Move local_address into struct netlink
2014-05-03 Ian Jacksonnetlink: Plumb "sender" through to ICMP generation
2014-05-03 Ian Jacksonnetlink: Break out sender_name
2014-05-03 Ian Jacksonnetlink: rename "client" to "sender" in many places
2014-05-01 Ian Jacksonchangelog, finalise 0.3.1~beta1 debian/0.3.1_beta1
2014-04-24 Ian Jacksonsite: Negotiate (configurable) MTU wip.frag.v1
2014-04-24 Ian Jacksonsite: Remove clone-and-hack of signature verification
2014-04-24 Ian Jacksonnetlink: Advise netlink clients of the local link MTU
2014-04-24 Ian Jacksonnetlink: fix IP length check (SECURITY)
2014-04-24 Ian Jacksonnetlink: Only complain about initial frags for us
2014-04-24 Ian Jacksonfragmentation: Fragment packets as required
2014-04-24 Ian Jacksonutil.h: Provide MIN and MAX macros
2014-04-24 Ian Jacksonnetlink: Provide MDEBUG macro
2014-04-24 Ian Jacksonnetlink: Break out netlink_host_deliver
2014-04-24 Ian Jacksonnetlink: Abolish client param to netlink_icmp_simple
2014-04-24 Ian Jacksonfragmentation: Rename "frag_off" field to "frag"
2014-04-24 Ian Jacksonnetlink: Make ip_csum and ip_fast_csum const-correct
2014-04-24 Ian Jacksonnetlink: Be more conservative about ICMP errors
2014-04-24 Ian Jacksonnetlink: Set "unused" in ICMP header (SECURITY)
2014-04-24 Ian Jacksonfragmentation: Fix fragmentation field check
2014-04-24 Ian Jacksonslip: Drop packets >mtu (SECURITY)
2014-04-24 Ian Jacksontest-example: USE mtu of 1400 not 500 (!)
2014-04-24 Ian Jacksontest-example: Provide test which uses unshare(8)
2014-04-24 Ian Jacksonnetlink: Remove a newline from p-t-p startup message
2014-04-24 Ian Jacksonnetlink: Avoid crash with clientless netlink
2014-04-24 Ian Jacksonnetlink: Break out netlink_client_deliver
2013-09-01 Ian JacksonFix formatting error in secnet.8 manpage.
2013-09-01 Ian Jacksonmore release checklist changes
2013-09-01 Ian JacksonUpdates to release checklist in
2013-09-01 Ian JacksonRelease of 0.3.0. No code changes since 0.3.0~beta3. v0.3.0
2013-08-05 Ian Jacksonchangelog, Makefile: finalise 0.3.0~beta3 debian/0.3.0_beta3
2013-08-05 Ian Jacksonchangelog: 0.3.0~beta3~~iwj1
2013-08-05 Ian Jacksonsite: Initialise st->scratch with SETUP_BUFFER_LEN...
2013-08-01 Ian Jacksonchangelog: Mention netlink short packet discard. debian/0.3.0_beta2
2013-08-01 Ian Jacksonnetlink: Safely discard short packets
2013-07-25 Ian Jacksonchangelog: Describe 0.3.0~beta2
2013-07-25 Ian Jacksonsite: New PROD message
2013-07-25 Ian Jacksonslip: Buffer management (max_start_pad) fixes
2013-07-25 Ian Jacksonudp.c: call buffer_init
2013-07-25 Ian Jacksonmax_start_pad: calculate globally, not via client graph
2013-07-25 Ian JacksonUse FORMAT everywhere, and fix up the errors it finds
2013-07-25 Ian Jacksonsite: support multiple transforms
2013-07-25 Ian Jacksonsite, transform: per-transform-instance max_start_pad
2013-07-25 Ian Jacksonsite, netlink: abolish max_end_pad and min_end_pad
2013-07-25 Ian Jacksonsite: dynamically create and destroy transform instances
2013-07-25 Ian Jacksonsite: Check transform errors; factor out transform...
2013-07-25 Ian Jacksonsite: interpret first 4 bytes of extrainfo as capabilities
2013-07-25 Ian Jacksonsite: use unaligned.h's functions, not pointer cast...
2013-07-25 Ian Jacksonsite: Extra info in name fields for MSG1, clearer proce...
2013-07-25 Ian Jacksonsite: fix site name checking leaving room for expansion
2013-07-25 Ian JacksonNOTES: Remove unimplemented protocol negotiation
2013-07-25 Ian JacksonNOTES: Remove paragraph about slow-to-prepare messages
2013-07-25 Ian JacksonNOTES: Improve documentation of NAKs.
2013-07-25 Ian Jacksonsite: Send NAKs for undecryptable data packets (msg0)
2013-07-25 Ian Jacksonudp, util: Break out send_nak function
2013-07-25 Ian Jacksonudp.c: Do not send NAKs in response to NAKs
2013-07-25 Ian Jacksonmagic: Introduce LABEL_NAK
2013-07-25 Ian Jacksontransform: Provide Serpent-EAX transform
2013-07-25 Ian Jacksontransform: Pass a direction flag to the transform
2013-07-25 Ian Jacksontransform: Allow DH to set the key size
2013-07-25 Ian Jacksontransform: split out transform-common.h
2013-07-25 Ian JacksonEAX: provide an implementation of EAX
2013-07-25 Ian Jacksoncrypto: Copy an AES (Rijndael) implementation into...
2013-07-25 Ian Jacksoncrypto: Copy a SHA512 implementation into tree
2013-07-25 Ian Jacksonserpent: Ad-hoc debugging facility
2013-07-25 Ian Jacksonserpent: Provide little-endian version too, but ours...
2013-07-25 Ian Jacksonserpent, transform: rework GET_32BIT_MSB_FIRST, PUT_...
2013-07-25 Ian Jacksonserpent: const-correct
2013-07-25 Ian Jacksontransform: Do not look at any bytes of PKCS#5 padding...
2013-07-25 Ian Jacksonmemcmp: Introduce and use consttime_memeq
2013-07-25 Ian Jacksonutil, buffers: Preparatory improvements
2013-07-25 Ian Jacksonunaligned.h: rationalise; provide buf_append_uint8...
2013-07-25 Mark Woodingrsa.c: Check public key length.
2013-07-25 Mark Woodingrsa.c: Replace the magic length 1024 with a (larger...
2013-07-25 Mark Woodingrsa.c: Factor out constructing the EMSA-PKCS1 message...
2013-07-25 Mark Woodingrsa.c: Fix incorrect commentary.
2013-07-03 Simon Tathamslip: tolerate SLIP decoding errors.
2013-07-03 Simon Tathamtun: add hard routes even if they are currently down.
2012-07-12 Ian Jacksonbuild system: debian packaging improvements debian/0.3.0_beta1
2012-07-12 Ian Jacksonchangelog: describe version 0.3.0
2012-07-12 Ian Jacksonsite: When if our MSG5s (or peer's MSG6s) get lost...
2012-07-12 Ian Jacksonsite: Keep old keys, and allow them to be used by peer
2012-07-12 Ian Jacksonsite: Generalise deletion and timeout of keys
2012-07-12 Ian Jacksonsite: Move current_transform, _key_timeout and remote_s...
2012-07-12 Ian Jacksonsite: No longer track key validity ourselves
2012-07-12 Ian Jacksontransform: add ->valid() function
2012-07-12 Ian Jacksonsite: Deal with losing our MSG6 - retransmit MSG6 when...
2012-07-12 Ian Jacksonsite: Deal with losing peer's MSG6 - go to RUN on MSG0...
2012-07-12 Ian Jacksonsite, transform: Do not initiate rekey when packets...
2012-07-12 Ian Jacksonsite: Remove pointless check from decrypt_msg0
2012-07-12 Ian Jacksonsite: Break out separate function for decrypting msg0
2012-07-12 Ian Jacksonnetlink: abolish check_config and output_config
2012-07-12 Ian Jacksonnetlink: report why a packet is bad