Age | Commit message (Collapse) | Author |
|
Tested by espie@
|
|
|
|
|
|
make no-port-forwarding for RSA keys deny both -L and -R style fwding
|
|
|
|
|
|
|
|
|
|
author: ho
Bugfix for IPSEC_ID_USER_FQDN from <<Jorgen.Granstam@abc.se>.
Apply similar to the IPSEC_ID_FQDN case plus fix the log messages.
|
|
author: ho
Bugfix. From <Jorgen.Granstam@abc.se>.
|
|
|
|
|
|
In pv_unlink4m we check if the page that was uncached due to bad aliases
can be cached again. The check was correct but instead of clearing this
flag we clear all other flags except PV_ANC.
|
|
|
|
author: niklas
-Wall friendly
|
|
author: niklas
Fix cert ID hashing
|
|
(this bug was introduced since we mix KAME getaddrinfo and NRL freeaddrinfo).
|
|
Fix a couple of buglets with ingress flow deletion.
tcpdump on enc0 should now show all outgoing packets *before* being
processed, and all incoming packets *after* being processed.
Good to be in Canada (land of the free commits).
|
|
Use the new ESP/AH flags for "old" ESP/AH.
|
|
|
|
loclibpth to be /usr/local/include and /usr/local/lib respectively.
This allows third party modules to grab stuff from /usr/local/{lib,include}
but perl itself doesn't search for things there during a build.
|
|
XXX shares database file with IPv4 one (0.0.127.in-addr.arpa)
|
|
|
|
|
|
rcmd(): IPv4 only
rcmd_af(): af independent
ruserok(): af independent
iruserok(): IPv4 only
iruserok_sa(): af independent
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
to zero the table when we have 0 mappings in a segment.
|
|
- Use a normal while-loop when walking the pv lists instead of an ugly hack.
- always clean the pte even if we know that it will be freed.
- No need to flush the segment from the tlb in kernel.
- add some ifdef DIAGNOSTIC.
- clear the PV_ANC flag on the pv.
|
|
|
|
|
|
and reset for future yyparse() calls... obscure eh
|
|
|
|
|
|
author: niklas
style
author: ho
Lower the common {ADD,DEL}FLOW warnings to log_debug() on OpenBSD.
|
|
author: angelos
Oops on previous PFS-policy patch. Small fixes in the manpages.
|
|
author: angelos
GMTTimeOfDay and LocalTimeOfDay attributes, comment in x509.c.
author: angelos
Include files, in anticipation of the keynote.h changes.
|
|
date: 2000/01/25 13:35:24; author: niklas; state: Exp; lines: +8 -1
Do not assume ingress flows are available
date: 2000/01/25 01:24:38; author: angelos; state: Exp; lines: +40 -1
We also allow the remote gateway to talk to the local subnet and the
local gateway through the SAs setup.
date: 2000/01/25 01:09:20; author: angelos; state: Exp; lines: +2 -2
Don't use REPLACE for ingress flows.
date: 2000/01/24 23:28:39; author: angelos; state: Exp; lines: +30 -28
Delete ACL only for incoming SAs...
date: 2000/01/23 22:56:43; author: angelos; state: Exp; lines: +2 -2
Send SA payload when deleting ingress flow.
date: 2000/01/13 22:54:54; author: angelos; state: Exp; lines: +5 -1
Return on error from ingress flow establishment/deletion.
date: 2000/01/13 22:53:21; author: angelos; state: Exp; lines: +25 -5
Interim ingress flows.
date: 2000/01/13 06:48:27; author: angelos; state: Exp; lines: +37 -12
Establish (and delete) ingress flows.
author: ho
Unbreak.
author: ho
Compile under OpenBSD again.
author: niklas
Ugly KAME support, will be improved
author: angelos
Get rid of the LOCALFLOW flag.
author: ho
log_print -> log_debug for delete_spi: DELETE message. Plus log class typos.
|
|
author: ho
Add Blowfish-main-mode and Blowfish-quick-mode,
including suites, protocols and transforms for them.
Add a policy file default, currently set to /etc/isakmpd/policy.
Also, slightly more verbose comments for the quick mode transforms.
author: ho
Kill volume lifetimes for main mode.
Add AH-SHA tranforms for quick mode, and 3DES-MD5 transform for main mode.
|
|
date: 2000/01/25 02:21:10; author: angelos; state: Exp; lines: +2 -2
Move the policy file location
author: angelos
GMTTimeOfDay and LocalTimeOfDay attributes, comment in x509.c.
author: angelos
Oops on previous PFS-policy patch. Small fixes in the manpages.
author: angelos
Add pfs keynote attribute.
author: angelos
Include files, in anticipation of the keynote.h changes.
|
|
author: niklas
typo
|
|
author: angelos
Manpage support in the Makefiles, mention in README.
author: niklas
Up-to-date
author: niklas
Typo + mail change for ho
|
|
author: ho
Blowfish needs the KEY_LENGTH attribute accepted.
|
|
samples/singlehost-west.conf: Merge with EOM 1.6
samples/VPN-west.conf: Merge with EOM 1.9
samples/VPN-east.conf: Merge with EOM 1.9
author: niklas
Remove deprecated stayalive flags
author: niklas
Correct AH transform attributes
|