Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-04-28 | spacing | Theo de Raadt | |
2004-04-28 | remove XXX that is wrong | Theo de Raadt | |
2004-04-28 | spacing | Henning Brauer | |
2004-04-28 | spacing | Theo de Raadt | |
2004-04-28 | correct yacc | Theo de Raadt | |
2004-04-28 | don't load SAs into the kernel if IKE is used. | Markus Friedl | |
2004-04-28 | keep route refresh counters into account when building sums, and | Henning Brauer | |
print route refresh counters in the neighbor view | |||
2004-04-28 | pfsync stats fixups: | Ryan Thomas McBride | |
- convert counters to 64 bits - add dedicated counters for sanity checks added right before release - clean up netstat output | |||
2004-04-28 | add /etc/isakmpd/pubkeys/{fqdn,ipv4,ipv6,ufqdn}, theo markus ok | Henning Brauer | |
2004-04-28 | prefix the auth related defines by AUTH_, we had a name clash, markus ok | Henning Brauer | |
2004-04-28 | Make carp(4) aware of its physical interface: | Ryan Thomas McBride | |
- If the physical interface goes down or the link goes down, the carp interface goes down as well. - We treat this like the preemption holdoff with pfsync. So if one of the carp interfaces is known to be bad (because the physical interface it's associated with is bad), all the other carp interfaces back off: they won't preempt, and their advskew goes to 240. ok cedric@ | |||
2004-04-28 | IPv6 support; ok beck@ | Damien Miller | |
2004-04-28 | point out that pfsync_send_bus and pfsync_sendout must be called in splnet() | Philipp Buehler | |
ok mcbride@ | |||
2004-04-27 | teach printconf about all this shiny new ipsec stuff | Henning Brauer | |
2004-04-27 | set conf.auth.methodod for md5, too | Markus Friedl | |
2004-04-27 | ike before in | Henning Brauer | |
2004-04-27 | generate a isakmpd (host) key; ok henning, deraadt, cedric | Markus Friedl | |
2004-04-27 | rename the ipsec struct to auth, move all tcpmd5 related fields in there, and | Henning Brauer | |
add a generic "method" field that expresses what method (none/md5sig/ipsec manual/ipsec ike) is in use markus ok | |||
2004-04-27 | clean up ifdef hell | Philipp Buehler | |
2004-04-27 | parser parts for ipsec ike, markus ok | Henning Brauer | |
2004-04-27 | make "pfctl -vvsq" to print "No queue in use" and exit when there is no | Kenjiro Cho | |
queue to show the state. requested by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@ | |||
2004-04-27 | getaddrinfo 4th arg has to be non-null. Gerard gerritsen | Jun-ichiro itojun Hagino | |
2004-04-27 | add an example w/ fstat(1) | Philipp Buehler | |
2004-04-27 | reworking of man page and sync/update usage(); | Jason McIntyre | |
this stuff is based mostly on diffs from jared yanovich, with some stuff from myself and otto; ok naddy@ otto@ markus@ deraadt@ | |||
2004-04-27 | fd passing works over a socketpair too of course so document this. | Todd C. Miller | |
Also test it in regress to be pedantic (though the kernel path is really the same). While there, remove cred-passing code that we don't support. OK deraadt@, | |||
2004-04-27 | two missing breaks, repairs tcpmd5, with markus | Henning Brauer | |
2004-04-27 | initial documentation | Markus Friedl | |
2004-04-27 | validate the sequence numbers on TCP resets are an exact match. check is only | Mike Frantzen | |
enabled when we're doing full frag reassembly and thus have full seq info ok markus@ | |||
2004-04-27 | don't loop forever on 0-size extensions | Markus Friedl | |
2004-04-27 | regress check for macro presence/failure in bounded attrib declaration | Anil Madhavapeddy | |
2004-04-27 | restrict the ipsec flows to BGP only; ok henning | Markus Friedl | |
2004-04-27 | Set oldp en oldlenp to NULL; provide feedback; set exit status. | Otto Moerbeek | |
ok markus@ | |||
2004-04-27 | Require NULL oldp when dropping a connection. | Otto Moerbeek | |
ok markus@ | |||
2004-04-27 | Add __bounded__ attributes like the other hash functions have. | Todd C. Miller | |
With help from avsm@ | |||
2004-04-27 | A quad is two ints, not two longs. Also fix some problems with | Otto Moerbeek | |
conversions from floating point to quad. Problem reported by Marcus Holland-Moritz. From NetBSD. ok millert@ | |||
2004-04-27 | unbreak^2 | Henning Brauer | |
2004-04-27 | missing ';' in actually unreached code (pointed out by logix(at)franken.de) | Philipp Buehler | |
2004-04-27 | repair | Henning Brauer | |
2004-04-27 | missing `.It' which was causing START and CT descriptions to be concatenated; | Jason McIntyre | |
from Juho Juopperi (NetBSD PR 25352); | |||
2004-04-27 | Make the bit count u_int64_t instead of two u_int32_t. Adapted from | Todd C. Miller | |
changes Niklas made to the md5 code long ago. OK hshoexer@ | |||
2004-04-27 | typo from Michael Knudsen; | Jason McIntyre | |
2004-04-27 | typo and remove some Ns hacks no longer needed; | Jason McIntyre | |
2004-04-27 | irregardless -> irrespective; | Jason McIntyre | |
ok millert@ krw@ derision from the rest of the world stolen from a rejected freebsd pr; | |||
2004-04-27 | various small fixes; | Jason McIntyre | |
ok mcbride@ | |||
2004-04-27 | regress test for environment passing, SendEnv & AcceptEnv options; ok markus@ | Damien Miller | |
2004-04-27 | bz #815: implement ability to pass specified environment variables from the | Damien Miller | |
client to the server; ok markus@ | |||
2004-04-27 | do not link ssltest.c into libssl, stops main/doit symbols from being | Anil Madhavapeddy | |
exported. no bump needed since nothing should use them, markus@ ok | |||
2004-04-27 | crud stripping; henning ok | Theo de Raadt | |
2004-04-27 | do the errno ERANGE dance around a strtol; henning ok | Theo de Raadt | |
2004-04-27 | announce route refresh capability, and parse announced route refresh capa | Henning Brauer | |