summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2004-04-28spacingTheo de Raadt
2004-04-28remove XXX that is wrongTheo de Raadt
2004-04-28spacingHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28correct yaccTheo de Raadt
2004-04-28don't load SAs into the kernel if IKE is used.Markus Friedl
2004-04-28keep route refresh counters into account when building sums, andHenning Brauer
print route refresh counters in the neighbor view
2004-04-28pfsync stats fixups:Ryan Thomas McBride
- convert counters to 64 bits - add dedicated counters for sanity checks added right before release - clean up netstat output
2004-04-28add /etc/isakmpd/pubkeys/{fqdn,ipv4,ipv6,ufqdn}, theo markus okHenning Brauer
2004-04-28prefix the auth related defines by AUTH_, we had a name clash, markus okHenning Brauer
2004-04-28Make carp(4) aware of its physical interface:Ryan Thomas McBride
- If the physical interface goes down or the link goes down, the carp interface goes down as well. - We treat this like the preemption holdoff with pfsync. So if one of the carp interfaces is known to be bad (because the physical interface it's associated with is bad), all the other carp interfaces back off: they won't preempt, and their advskew goes to 240. ok cedric@
2004-04-28IPv6 support; ok beck@Damien Miller
2004-04-28point out that pfsync_send_bus and pfsync_sendout must be called in splnet()Philipp Buehler
ok mcbride@
2004-04-27teach printconf about all this shiny new ipsec stuffHenning Brauer
2004-04-27set conf.auth.methodod for md5, tooMarkus Friedl
2004-04-27ike before inHenning Brauer
2004-04-27generate a isakmpd (host) key; ok henning, deraadt, cedricMarkus Friedl
2004-04-27rename the ipsec struct to auth, move all tcpmd5 related fields in there, andHenning Brauer
add a generic "method" field that expresses what method (none/md5sig/ipsec manual/ipsec ike) is in use markus ok
2004-04-27clean up ifdef hellPhilipp Buehler
2004-04-27parser parts for ipsec ike, markus okHenning Brauer
2004-04-27make "pfctl -vvsq" to print "No queue in use" and exit when there is noKenjiro Cho
queue to show the state. requested by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@
2004-04-27getaddrinfo 4th arg has to be non-null. Gerard gerritsenJun-ichiro itojun Hagino
2004-04-27add an example w/ fstat(1)Philipp Buehler
2004-04-27reworking of man page and sync/update usage();Jason McIntyre
this stuff is based mostly on diffs from jared yanovich, with some stuff from myself and otto; ok naddy@ otto@ markus@ deraadt@
2004-04-27fd passing works over a socketpair too of course so document this.Todd C. Miller
Also test it in regress to be pedantic (though the kernel path is really the same). While there, remove cred-passing code that we don't support. OK deraadt@,
2004-04-27two missing breaks, repairs tcpmd5, with markusHenning Brauer
2004-04-27initial documentationMarkus Friedl
2004-04-27validate the sequence numbers on TCP resets are an exact match. check is onlyMike Frantzen
enabled when we're doing full frag reassembly and thus have full seq info ok markus@
2004-04-27don't loop forever on 0-size extensionsMarkus Friedl
2004-04-27regress check for macro presence/failure in bounded attrib declarationAnil Madhavapeddy
2004-04-27restrict the ipsec flows to BGP only; ok henningMarkus Friedl
2004-04-27Set oldp en oldlenp to NULL; provide feedback; set exit status.Otto Moerbeek
ok markus@
2004-04-27Require NULL oldp when dropping a connection.Otto Moerbeek
ok markus@
2004-04-27Add __bounded__ attributes like the other hash functions have.Todd C. Miller
With help from avsm@
2004-04-27A quad is two ints, not two longs. Also fix some problems withOtto Moerbeek
conversions from floating point to quad. Problem reported by Marcus Holland-Moritz. From NetBSD. ok millert@
2004-04-27unbreak^2Henning Brauer
2004-04-27missing ';' in actually unreached code (pointed out by logix(at)franken.de)Philipp Buehler
2004-04-27repairHenning Brauer
2004-04-27missing `.It' which was causing START and CT descriptions to be concatenated;Jason McIntyre
from Juho Juopperi (NetBSD PR 25352);
2004-04-27Make the bit count u_int64_t instead of two u_int32_t. Adapted fromTodd C. Miller
changes Niklas made to the md5 code long ago. OK hshoexer@
2004-04-27typo from Michael Knudsen;Jason McIntyre
2004-04-27typo and remove some Ns hacks no longer needed;Jason McIntyre
2004-04-27irregardless -> irrespective;Jason McIntyre
ok millert@ krw@ derision from the rest of the world stolen from a rejected freebsd pr;
2004-04-27various small fixes;Jason McIntyre
ok mcbride@
2004-04-27regress test for environment passing, SendEnv & AcceptEnv options; ok markus@Damien Miller
2004-04-27bz #815: implement ability to pass specified environment variables from theDamien Miller
client to the server; ok markus@
2004-04-27do not link ssltest.c into libssl, stops main/doit symbols from beingAnil Madhavapeddy
exported. no bump needed since nothing should use them, markus@ ok
2004-04-27crud stripping; henning okTheo de Raadt
2004-04-27do the errno ERANGE dance around a strtol; henning okTheo de Raadt
2004-04-27announce route refresh capability, and parse announced route refresh capaHenning Brauer