summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
1999-03-31Merge with EOM 1.71Niklas Hallqvist
Fix comment
1999-03-31ipsec.c: Merge with EOM 1.86Niklas Hallqvist
ipsec.h: Merge with EOM 1.33 pf_encap.c: Merge with EOM 1.52 pf_key_v2.c: Merge with EOM 1.3 Fix case of missing client ID payloads, a case the standards allow. Thanks to Michael Paddon (mwp@aba.net.au) for the diffs I based my fix upon. His diff also made me realize I stored the address information in host order in internal structures where I had planned to use network order. Fix this, and remove the XXXes I had due to this elsewhere. Add commentary.
1999-03-31Avoid a few warnings on the alphabrian
1999-03-31Oops - remove register keywordbrian
1999-03-31Another alignment bogon.brian
1999-03-31name default if, plus another bug; garath@ntplx.netTheo de Raadt
1999-03-31because of RAMDISK not having pms0, move irq 12 to later on; fgschTheo de Raadt
1999-03-31more examplesJason Wright
1999-03-31finish documenting ioctls and errorsJason Wright
1999-03-31Merge with EOM 1.2Niklas Hallqvist
Use flow replacment openbsd extension. Deleted flows when deleting SAs. Handle expirations. General cleanup.
1999-03-31Merge with EOM 1.110Niklas Hallqvist
new exchange establishment API, byteorder fix to debug printout. Fix a long standing logic error related to saving SA bodies that ElectricFence found for me.
1999-03-31Merge with EOM 1.19Niklas Hallqvist
Do not overwrite the last-sent-message of phase 1 with last-sent dittos of phase2. Add some debugging. Make exchange finalization accept added hooks to run. Try to protect better against multiple equal exchanges getting started concurrently. Set the SA names from the exchange name up early. Change "Attributes" to "Flags" to not be mistaken for ISAKMP attributes. Let phase 2 exchanges take finalization functions too.
1999-03-31Merge with EOM 1.69Niklas Hallqvist
Do not overwrite the last-sent-message of phase 1 with last-sent dittos of phase2. Add some debugging. Make exchange finalization accept added hooks to run. Try to protect better against multiple equal exchanges getting started concurrently. Set the SA names from the exchange name up early. Change "Attributes" to "Flags" to not be mistaken for ISAKMP attributes. Let phase 2 exchanges take finalization functions too.
1999-03-31Implement SADB_SAFLAGS_X_REPLACEFLOWNiklas Hallqvist
1999-03-31Merge with EOM 1.43Niklas Hallqvist
the SA replace flag
1999-03-31Merge with EOM 1.69Niklas Hallqvist
Add debugging. Provide a way to say an SA has been replaced wrt the flows. Do not free the flow information before calling the sysdep delete_spi routine, as it may use it.
1999-03-31Merge with EOM 1.51Niklas Hallqvist
Async PF_ENCAP messages might be handled earlier so recheck readability in the handler. Remove some XXX comments. Fix some byte order conversions in debugging output.
1999-03-31Merge with EOM 1.13Niklas Hallqvist
Documet IPSec SA flags
1999-03-31Merge with EOM 1.85Niklas Hallqvist
Mark replaced SAs as such. Move SA naming earlier. Reorder & comment funcs.
1999-03-31Merge with EOM 1.70Niklas Hallqvist
Do not deref after free, thanks ElectricFence
1999-03-31Merge with EOM 1.2Niklas Hallqvist
Append to LDADD and DPADD, not replace
1999-03-30the real thingTheo de Raadt
1999-03-30Crank MAX_START to 256 instead of making it dependent on MAX_TARGET andTodd C. Miller
SCSI_NCR_DFLT_TAGS
1999-03-30minor parser bugfix; amazing what you find when you get in the right mindsetTodd C. Miller
1999-03-30Point at cs.slcs_u.csu_ip instead of the just-copied ``cp''brian
when recalculating the ip checksum. cp is not guaranteed to be aligned. It now doesn't matter that cp isn't aligned as the caller does another mbuf_Alloc() regardless.
1999-03-30add obj target that works in conjuction with WRKOBJDIR;Marco S Hyman
code from op21@squish.org
1999-03-30Final changes for real 1.5.9 releaseTodd C. Miller
1999-03-30first shot at documenting bindNiels Provos
1999-03-30Finish repair of license file (old one still included here; now referIan Darwin
to new one), and update my email and the current FTP addresses.
1999-03-30Maintain a `necessary' marker to indicate that we *probably*brian
need to process a signal (usually a SIGALRM). Check to see if we need to process a signal both before *and* after calling select() as older (pre-2.0) versions of ppp used to. This handles the possibility that ppp may block at some point (maybe due to an open() of a misconfigured device). Previously, we'd potentially lock up in select(). The `necessary' marker reduces the increased signal checking overhead so that at full speed with no compression transferring an 83Mb file via a ``!ppp -direct'' device, we get a 1% throughput gain.
1999-03-30make option IPSEC imply option KEYNiklas Hallqvist
1999-03-29New multicast route setup styleNiklas Hallqvist
1999-03-29initgroups(3) should not spew to stderr; giles@nemeton.com.auTodd C. Miller
Also document the NGROUPS limit.
1999-03-29Only print "already up to date" if in verbose modeTodd C. Miller
1999-03-29sudo 1.5.9--fixes some parser bugsTodd C. Miller
1999-03-29syncTheo de Raadt
1999-03-29If we adjust our required ACCMAP due to a more restrictivebrian
ACCMAP being REQuested by the peer, also increment our FSM id so that we don't end up sending out a new REQ with the same ID and different data (the changed ACCMAP).
1999-03-29Ensure that the thing we're casting to struct ipbrian
is aligned for non-i386 architectures.
1999-03-29make it compileNiels Provos
1999-03-29remove references to header files that should not be shipped,Dale S. Rahn
previously were shipping machine specific header files for other processors in addition to the correct one.
1999-03-29add perl header files for recently added header files.Dale S. Rahn
remove perl headers files for files previously incorrectly installed.
1999-03-29powerpc does not support shared libraries and thus should not shipDale S. Rahn
link.h or dlfcn.h
1999-03-28inclusion protection; friesTheo de Raadt
1999-03-28ncurses-4.2-990327; just man page fixesTodd C. Miller
1999-03-28Increase the timeout and wait for ``PPP'' in the compuservebrian
example. Submitted by: MALCOLM BOFF <Malcolm_Boff@compuserve.com>
1999-03-27enable photurisd againNiels Provos
1999-03-27convert the kernel module to PFKEYv2, support for binding incoming andNiels Provos
outgoing SA-pairs, fix a bug in SPI generation. the daemon registers with pfkey but does not yet handle expiration or acquire messages. well, there are NO acquire messages at the moment, so dynamic keyed vpn or stuff does not work :-\ - all this done in canada. thanks again to dugsong and linh for the ride. linh is sleeping now.
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
1999-03-27Upgrade to 2.5.4. Mopprobe is working again, and some linux support. -mojMats O Jansson
1999-03-27Fix rev 1.4Paul Janzen
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-25 08:53:59 +0000