diff options
author | Niklas Hallqvist <niklas@cvs.openbsd.org> | 1998-12-21 01:02:36 +0000 |
---|---|---|
committer | Niklas Hallqvist <niklas@cvs.openbsd.org> | 1998-12-21 01:02:36 +0000 |
commit | 0368e31221f66d22f0612fca6754934ebcf3ee14 (patch) | |
tree | 671d0efb5cb97395e2f2042ee3547f8143734f10 /sbin/isakmpd/README | |
parent | 335a494f8e3c20ed5a4514d5ea7c3df4aaaa3518 (diff) |
Last months worth of work on isakmpd, lots done
Diffstat (limited to 'sbin/isakmpd/README')
-rw-r--r-- | sbin/isakmpd/README | 39 |
1 files changed, 19 insertions, 20 deletions
diff --git a/sbin/isakmpd/README b/sbin/isakmpd/README index 1db053498cc..5f09c9a470d 100644 --- a/sbin/isakmpd/README +++ b/sbin/isakmpd/README @@ -1,18 +1,20 @@ -$OpenBSD: README,v 1.4 1998/11/17 11:10:06 niklas Exp $ -$EOM: README,v 1.10 1998/10/15 11:13:35 niklas Exp $ +$OpenBSD: README,v 1.5 1998/12/21 01:02:22 niklas Exp $ +$EOM: README,v 1.12 1998/12/19 09:18:18 niklas Exp $ This is isakmpd, a BSD-licensed ISAKMP/Oakley (a.k.a. IKE) implementation. It's written by Niklas Hallqvist and Niels Provos, -funded by Ericsson Radio Systems AB. Currently it is just work in -progress, it cannot be used for anything real. For example it does not -renegotiate SAs when an application says they have expired. It is not -released, thus I won't bother calling it any version numbers. When you -got the source, hopefully the archive was named with a date which -reflects when it was created. These archives are also known as snapshots -and will be created at irregular intervals and put up on ftp.gsnig.net -and ftp.appli.se in /pub/isakmpd. From Nov 14, 1998 isakmpd is also -available in the OpenBSD main source tree under src/sbin/isakmpd. Look -at http://www.openbsd.org/ for details on how to get OpenBSD source. +funded by Ericsson Radio Systems AB. Currently it is work in +progress, although it can be used for real setups if some features are +not used. For example it does not renegotiate SAs when an application +says they have expired. It is not released, thus I won't bother +calling it any version numbers. When you got the source, hopefully +the archive was named with a date which reflects when it was created. +These archives are also known as snapshots and will be created at +irregular intervals and put up on ftp.gsnig.net and ftp.appli.se in +/pub/isakmpd. From Nov 14, 1998 isakmpd is also available in the +OpenBSD main source tree under src/sbin/isakmpd, though slightly +modified for patent reasons. Look at http://www.openbsd.org/ for +details on how to get OpenBSD source. Isakmpd is being developed under OpenBSD, with OpenBSD as its primary target, soon enough however, a Linux effort will be started. Until @@ -43,17 +45,14 @@ Now you have setup your daemon and can watch incoming negotiations. But how do you get such? Either use http://isakmp-test.ssh.fi/, there's an excellent service, just waiting for you. Or you can try to start another isakmpd on another port (say -p5001 or so, instead) -and another fifo (let's say /tmp/other.fifo), then issue this command: +and another fifo (let's say /tmp/other.fifo). Then edit the config +file to have some peer descriptions that fit your need and issue a +command like this: -$ echo "c udp 127.0.0.1:5000 2 1" >/tmp/other.fifo +$ echo "C IPsec-peer-1" >/tmp/other.fifo and watch. You can turn on debugging on that isakmpd too of course, for -greater fun. When the ISAKMP SA is setup you can try quick mode too: - -$ echo "c isakmp <icookie+rcookie> 32 1" >/tmp/other.fifo - -The cookie string you can get by sending the "r" command to the FIFO and -watching the log. +greater fun. You will by now have noticed that this implementation is incomplete, but who cares? You are here because you want to read code, start porting work |