Age | Commit message (Collapse) | Author |
|
|
|
author: niklas
As PF_KEY per the specs is a best-effort service, expect messages to get lost.
That means both replies in PF_KEY "RPCs" and expirations, the latter we
solve with extra paranoia and sets timeouts in isakmpd too.
|
|
author: niklas
Doc fixes from OpenBSD
author: niklas
Some extra error checking, documentation and style wrt connections
author: niklas
Initial text for Passive-Connections
author: niklas
Doc fix from OpenBSD
|
|
author: niklas
Some restructuring of ID checks, but still no coupling to names.
|
|
timer.c: Merge with EOM 1.12
author: ho
Logging nitpicks
|
|
author: niklas
Double dots squashed
author: ho
Updated. Minor typos.
|
|
author: ho
Expand the passive connection mechanism.
author: niklas
Some more #if 0 stuff for passive connections
author: ho
Add connections_report and connection_reinit
|
|
author: niklas
Initial stab at Oakley group 5, still an XXX though.
|
|
author: niklas
Style nits
author: ho
Perhaps look into IPCOMP soon?
|
|
author: ho
We do not require flags on implicit passive connections.
author: ho
Fix bug in matching IDs. Cleanup debugging.
author: ho
bug fix of decode_id function.
author: ho
Temp. add some more debugging around setup of passive connection
author: ho
Add more debugging output and correct connection_report
author: niklas
Some extra error checking, documentation and style wrt connections
author: ho
More passive connection support
author: niklas
Small bugfixes and style nits
author: ho
Expand the passive connection mechanism.
author: niklas
Some more #if 0 stuff for passive connections
author: ho
Commit to embryonic code for passive connections
author: niklas
Some type pedantery. Comment style nits.
author: ho
Add connections_report and connection_reinit
|
|
author: ho
New flag
|
|
author: niklas
Style nits
author: ho
Describe debug logging classes in some detail.
|
|
author: niklas
Some extra error checking, documentation and style wrt connections
author: niklas
Some more #if 0 stuff for passive connections
author: niklas
Error handling looked over. Some restructuring of ID checks, but still no
coupling to names.
|
|
author: niklas
Oakley group 5 is of 102 bit ops strength
author: niklas
Initial stab at Oakley group 5, still an XXX though.
|
|
author: ho
Add connection_report
|
|
author: niklas
Some extra error checking, documentation and style wrt connections
author: ho
New flag
author: niklas
SA expiration randomization is really only good on the soft timeout, early
hard expires may break more if we have a situation where our peer only
wants to act as initiator, and trusts the negotiated lifetime.
|
|
author: ho
Add missing #include
author: ho
Add connection_reinit to SIGHUP handler. Add comments.
|
|
page for details. This allows MP over non-tty devices where
the original ppp process must not exit (such as sshd-spawned
ppp sessions).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Will show up in the next egcs snapshot.
|
|
Adjust the base physical device name correctly after a link
transfer (allowing correct multilink callbacks).
|
|
|
|
|
|
|
|
|
|
|
|
characters at the end of the line in hexdump style.
|
|
|
|
|
|
|
|
|
|
|
|
will result in the rules being updated any time MYADDR
or HISADDR change.
|
|
change some &vm->vm_pmap to vm->vm_map.pmap
|
|
|
|
permissve about how memory may look in the case where we try to get an
aligned word consisting of a specific byte we are looking for.
Fixes egcs -O2 problem with libc/db/hash/hash.c.
|
|
|
|
filters any time either value changes.
|
|
we panic in ifmedia_set because ifmedia_match() fails.
|
|
|
|
|
|
|
|
unnecessary header file, add prototypes header file for utility building.
|
|
|
|
(likewise future pfkeyv2_acquire())
|