summaryrefslogtreecommitdiff
path: root/sbin/iked/ocsp.c
AgeCommit message (Expand)Author
2021-12-13Cleanup libcrypto memory management. Remove redundant NULL checksTobias Heider
2021-11-19Check stdrup() return value.Tobias Heider
2020-12-22Log SPI with SPI_SH() wherever possible.tobhe
2020-09-03Log OCSP url on connection failure.tobhe
2020-09-02Add 30s timeout for OCSP requests.tobhe
2020-09-01Log SPIs to make it easier to map OCSP messages to SAs.tobhe
2020-09-01Make OCSP response status logging less verbose.tobhe
2020-08-31Do not register a read/write callback on fd -1 (e.g. if connection failed).tobhe
2020-08-31Both ocsp_req_ctx and ocsp_req must be freed. Don't free ocsp_id as ittobhe
2020-08-31Use SA header (SPIs) to map OCSP connect requests to their respectivetobhe
2020-08-21Use trusted CA from /etc/iked/ca/ as OCSP issuer to get rid oftobhe
2020-08-18Add optional time-stamp validaten for ocsp. The new optional 'tolerate'tobhe
2020-08-17Fix possible leak of ocsp_id.tobhe
2020-08-16Clean up unused parameters.tobhe
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2015-12-07Sync proc.c, use shorter proc_compose[v]()Reyk Floeter
2015-11-23Replace socket_set_blockmode() and fcntl(fd, F_SETFL, O_NONBLOCK) callsReyk Floeter
2015-08-21Switch iked to C99-style fixed-width integer types.Reyk Floeter
2015-08-19Add missing OpenBSD CVS tag - no binary changeReyk Floeter
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2014-04-28spacingReyk Floeter
2014-04-22Update iked to use the same proc.c that relayd uses.Reyk Floeter
2014-02-17basic OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"'Markus Friedl