summaryrefslogtreecommitdiff
path: root/sbin/ipsecadm/ipsecadm.c
AgeCommit message (Collapse)Author
2002-07-03ansiTheo de Raadt
2001-12-01KNFTheo de Raadt
2001-08-05re-order headers as they should beTheo de Raadt
2001-07-06Fix unused/uninitialized variables.Angelos D. Keromytis
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-26configure sa_family on mask too. to preserve older practiceJun-ichiro itojun Hagino
2001-06-26allow -addr src/prefixlen dst/prefixlen. discussed with angelos.Jun-ichiro itojun Hagino
XXX usage() needs to be made more cute
2001-06-25Copyright update.Angelos D. Keromytis
2001-06-08Set SADB_X_POLICYFLAGS_POLICY for flows we add/delete.Angelos D. Keromytis
2001-06-05Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwardsNiklas Hallqvist
compatibility problems in isakmpd, at least 2.8 stable can compile current isakmpd now. angelos@ ok
2001-05-30MBOX->USERFQDNAngelos D. Keromytis
2001-04-19PF_KEY identity extensions are NUL-terminated. Do not forget neither toNiklas Hallqvist
allocate for the NUL, nor to actually transfer it.
2001-03-28Fix range checking on SPIs (Jean-Jacques.Bernard@hsc.fr)Angelos D. Keromytis
2001-03-22Allow srcid/dstid for manually-set SAs as well (mostly for debugAngelos D. Keromytis
purposes).
2001-03-08whack exit(-#)Theo de Raadt
2000-11-17*HMAC96->*HMACAngelos D. Keromytis
2000-10-25typo; deraadt okJason Wright
2000-10-18Destination address is not needed for flows.Angelos D. Keromytis
2000-10-16getserv* already returns ports in network byteorderNiklas Hallqvist
2000-10-09AES.Angelos D. Keromytis
2000-09-29Update for no -spi use with flowAngelos D. Keromytis
2000-09-21Send correct lengths for srcid/dstid.Angelos D. Keromytis
2000-09-21Allocate memory for srcid/dstid.Angelos D. Keromytis
2000-09-20srcid/dstid/srcid_type/dstid_type flags for flows.Angelos D. Keromytis
2000-09-19Re-add support for SA bundles.Angelos D. Keromytis
2000-09-19Update to use the new framework.Angelos D. Keromytis
2000-05-02Keep track of those offsets in argv[].Hakan Olsson
2000-04-22Remove extra space from usage.Angelos D. Keromytis
2000-04-22Slight clarification in usage.Angelos D. Keromytis
2000-04-22-keyfile/-authkeyfile flags, for reading keys from a file.Angelos D. Keromytis
2000-04-21fix some usage glitchesTheo de Raadt
2000-03-28fix sanity checks to allow authentication-only ESPJason Wright
2000-02-08in6.h is not necessary (in.h will bring it in)Jun-ichiro itojun Hagino
2000-01-27Conform with the new changes with regards to new/old ESP/AHAngelos D. Keromytis
2000-01-13Add -ingress flagAngelos D. Keromytis
2000-01-09Transport protocol ports are in network order.Angelos D. Keromytis
1999-12-20Accept IPv6 addresses.Angelos D. Keromytis
1999-12-06Minor identation.Angelos D. Keromytis
1999-12-04Deprecate -local flag.Angelos D. Keromytis
1999-11-04Support IPsec bypass flows. (ok angelos@, niklas@)Hakan Olsson
1999-09-07Add {newline, usage()} to 'unknown command' message.Hakan Olsson
1999-08-25Fix usage message, fix flow logic.Angelos D. Keromytis
1999-08-05Add 'ipsecadm flush' to do what 'route flush -encap' doesn't manage.Hakan Olsson
Sync manpage and fix a couple of typos.
1999-07-15SPI 0 is the one we use for demand keying, IANA reserved SPIs are notNiklas Hallqvist
allowed
1999-07-02rename SADB_foo_X_bar to SADB_X_foo_barTheo de Raadt
1999-06-05fix another inet_aton()Theo de Raadt
1999-06-05use inet_aton()Theo de Raadt
1999-04-18missing iscmdNiels Provos
1999-03-29make it compileNiels Provos
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-29 12:39:00 +0000