summaryrefslogtreecommitdiff
path: root/sbin/iked
AgeCommit message (Expand)Author
2023-11-10Always prefer group from initial KE payload as responder if supported.Tobias Heider
2023-09-02Make sure cert_type is not 0 to prevent leak of certid->id_buf.Tobias Heider
2023-09-02Remove unneccessary id == NULL check after dereferencing it. id can neverTobias Heider
2023-08-14Improve error message when if_indextoname() fails.Tobias Heider
2023-08-14Add explicit NULL checks for sa_cp_addr and sa_cp_addr6.Tobias Heider
2023-08-11Add iked support for route based sec(4) tunnels.Tobias Heider
2023-08-04Convert calls to ibuf_length() where it is clear that the ibuf is notClaudio Jeker
2023-07-28Implement print_hexbuf() to hexdump the contents of an ibuf.Claudio Jeker
2023-07-28Use ibuf_data() instead of accessing the ibuf buf pointer directly.Claudio Jeker
2023-07-18Kill ibuf_cat() since there is now ibuf_add_buf() in the official API.Claudio Jeker
2023-07-16Merge ibuf_get() with ibuf_getdata() and rename it to ibuf_getdata().Claudio Jeker
2023-06-28Add support to verify X509 chain from CERT payloads.Tobias Heider
2023-06-28Don't call daemon() after proc_init(), otherwise the child processesGerhard Roth
2023-06-25remove ca_sslinit()Omar Polo
2023-06-19Improve the ibuf API by adding these functions:Claudio Jeker
2023-06-17Fix leak of key.id_buf in pubkey auth case.Tobias Heider
2023-06-16Now that print_host() is unused, rename it to print_addr() and simplify.Theo Buehler
2023-06-14Replace the last few print_host() calls with print_addr() ones.Claudio Jeker
2023-06-13iked: introduce and use print_addr()Theo Buehler
2023-06-13Fix FILE leak in error path.Claudio Jeker
2023-06-12Use stdio open_memstream(3) to build up log strings instead of trying toClaudio Jeker
2023-06-06Use same pattern to work with offset by using a uint8_t pointer thatClaudio Jeker
2023-06-06Use ibuf_seek() instead of ibuf_data() + offset constructs. Effect isClaudio Jeker
2023-05-30Replace the one use of ibuf_prepend() using a similar ibuf_new() + ibuf_cat()Claudio Jeker
2023-05-23Replace ibuf_advance() with ibuf_reserve().Claudio Jeker
2023-05-23Replace ibuf_release() with ibuf_free() since the former just calls the latterClaudio Jeker
2023-05-23There is no need to ibuf_zero() or memset() any buffers.Claudio Jeker
2023-04-19remove duplicate includesJonathan Gray
2023-03-30i2d_ECDSA_SIG() may return a negative value in case of error.Alexander Bluhm
2023-03-10Fix possible leak of spibuf and flowbuf in error case.Tobias Heider
2023-03-08Delete obsolete /* ARGSUSED */ lint comments.Philip Guenther
2023-03-05Fix clean process shutdown by storing env globally like vmd and httpd doTobias Heider
2023-03-04Sync proc.c from vmd(8) to enabled fork + exec for all processes. This givesTobias Heider
2023-02-15proc_ispeer() is not used anywhere anymore so remove it everywhere.Tobias Heider
2023-02-10Add support for configuring multiple name servers as roadwarriorTobias Heider
2023-02-08iked: remove another unused variableTheo Buehler
2023-02-08iked: garbage collect an unused counter variable to make clang 15 happierTheo Buehler
2022-12-06Print size_t with %zu.Tobias Heider
2022-12-04Rename sun to s_un for portability.Tobias Heider
2022-12-03Consistently use uintXX_t from <stdint.h> instead of u_intXX_t.Tobias Heider
2022-12-03Include endian.h where needed for betohXX functions.Tobias Heider
2022-11-30Switch idiom of d2i_ECDSA_SIG() invocationTheo Buehler
2022-11-26Bump to 7.2Tobias Heider
2022-11-18Revert my last two changes.Moritz Buhl
2022-11-13Make sure csa->csa_bundled is NULL after freeing to prevent aMoritz Buhl
2022-11-11Make sure csa->csa_bundled is NULL after freeing to prevent aMoritz Buhl
2022-11-11In case of an invalid SA resp is passed to ikev2_msg_cleanup withoutMoritz Buhl
2022-11-07Free objects that were dynamically allocated in libcrypto with OPENSSL_free().Tobias Heider
2022-11-06Fix out-of-order string operations resulting in a wrongly calculatedTobias Heider
2022-10-24Fix DH group lookup when checking if PFS is required. Compare IDTobias Heider