summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/README
diff options
context:
space:
mode:
authorNiklas Hallqvist <niklas@cvs.openbsd.org>1998-12-21 01:02:36 +0000
committerNiklas Hallqvist <niklas@cvs.openbsd.org>1998-12-21 01:02:36 +0000
commit0368e31221f66d22f0612fca6754934ebcf3ee14 (patch)
tree671d0efb5cb97395e2f2042ee3547f8143734f10 /sbin/isakmpd/README
parent335a494f8e3c20ed5a4514d5ea7c3df4aaaa3518 (diff)
Last months worth of work on isakmpd, lots done
Diffstat (limited to 'sbin/isakmpd/README')
-rw-r--r--sbin/isakmpd/README39
1 files changed, 19 insertions, 20 deletions
diff --git a/sbin/isakmpd/README b/sbin/isakmpd/README
index 1db053498cc..5f09c9a470d 100644
--- a/sbin/isakmpd/README
+++ b/sbin/isakmpd/README
@@ -1,18 +1,20 @@
-$OpenBSD: README,v 1.4 1998/11/17 11:10:06 niklas Exp $
-$EOM: README,v 1.10 1998/10/15 11:13:35 niklas Exp $
+$OpenBSD: README,v 1.5 1998/12/21 01:02:22 niklas Exp $
+$EOM: README,v 1.12 1998/12/19 09:18:18 niklas Exp $
This is isakmpd, a BSD-licensed ISAKMP/Oakley (a.k.a. IKE)
implementation. It's written by Niklas Hallqvist and Niels Provos,
-funded by Ericsson Radio Systems AB. Currently it is just work in
-progress, it cannot be used for anything real. For example it does not
-renegotiate SAs when an application says they have expired. It is not
-released, thus I won't bother calling it any version numbers. When you
-got the source, hopefully the archive was named with a date which
-reflects when it was created. These archives are also known as snapshots
-and will be created at irregular intervals and put up on ftp.gsnig.net
-and ftp.appli.se in /pub/isakmpd. From Nov 14, 1998 isakmpd is also
-available in the OpenBSD main source tree under src/sbin/isakmpd. Look
-at http://www.openbsd.org/ for details on how to get OpenBSD source.
+funded by Ericsson Radio Systems AB. Currently it is work in
+progress, although it can be used for real setups if some features are
+not used. For example it does not renegotiate SAs when an application
+says they have expired. It is not released, thus I won't bother
+calling it any version numbers. When you got the source, hopefully
+the archive was named with a date which reflects when it was created.
+These archives are also known as snapshots and will be created at
+irregular intervals and put up on ftp.gsnig.net and ftp.appli.se in
+/pub/isakmpd. From Nov 14, 1998 isakmpd is also available in the
+OpenBSD main source tree under src/sbin/isakmpd, though slightly
+modified for patent reasons. Look at http://www.openbsd.org/ for
+details on how to get OpenBSD source.
Isakmpd is being developed under OpenBSD, with OpenBSD as its primary
target, soon enough however, a Linux effort will be started. Until
@@ -43,17 +45,14 @@ Now you have setup your daemon and can watch incoming negotiations.
But how do you get such? Either use http://isakmp-test.ssh.fi/,
there's an excellent service, just waiting for you. Or you can try to
start another isakmpd on another port (say -p5001 or so, instead)
-and another fifo (let's say /tmp/other.fifo), then issue this command:
+and another fifo (let's say /tmp/other.fifo). Then edit the config
+file to have some peer descriptions that fit your need and issue a
+command like this:
-$ echo "c udp 127.0.0.1:5000 2 1" >/tmp/other.fifo
+$ echo "C IPsec-peer-1" >/tmp/other.fifo
and watch. You can turn on debugging on that isakmpd too of course, for
-greater fun. When the ISAKMP SA is setup you can try quick mode too:
-
-$ echo "c isakmp <icookie+rcookie> 32 1" >/tmp/other.fifo
-
-The cookie string you can get by sending the "r" command to the FIFO and
-watching the log.
+greater fun.
You will by now have noticed that this implementation is incomplete, but
who cares? You are here because you want to read code, start porting work