summaryrefslogtreecommitdiff
path: root/sbin/ipsecadm/ipsecadm.c
AgeCommit message (Collapse)Author
2000-11-17*HMAC96->*HMACAngelos D. Keromytis
2000-10-25typo; deraadt okJason Wright
2000-10-18Destination address is not needed for flows.Angelos D. Keromytis
2000-10-16getserv* already returns ports in network byteorderNiklas Hallqvist
2000-10-09AES.Angelos D. Keromytis
2000-09-29Update for no -spi use with flowAngelos D. Keromytis
2000-09-21Send correct lengths for srcid/dstid.Angelos D. Keromytis
2000-09-21Allocate memory for srcid/dstid.Angelos D. Keromytis
2000-09-20srcid/dstid/srcid_type/dstid_type flags for flows.Angelos D. Keromytis
2000-09-19Re-add support for SA bundles.Angelos D. Keromytis
2000-09-19Update to use the new framework.Angelos D. Keromytis
2000-05-02Keep track of those offsets in argv[].Hakan Olsson
2000-04-22Remove extra space from usage.Angelos D. Keromytis
2000-04-22Slight clarification in usage.Angelos D. Keromytis
2000-04-22-keyfile/-authkeyfile flags, for reading keys from a file.Angelos D. Keromytis
2000-04-21fix some usage glitchesTheo de Raadt
2000-03-28fix sanity checks to allow authentication-only ESPJason Wright
2000-02-08in6.h is not necessary (in.h will bring it in)Jun-ichiro itojun Hagino
2000-01-27Conform with the new changes with regards to new/old ESP/AHAngelos D. Keromytis
2000-01-13Add -ingress flagAngelos D. Keromytis
2000-01-09Transport protocol ports are in network order.Angelos D. Keromytis
1999-12-20Accept IPv6 addresses.Angelos D. Keromytis
1999-12-06Minor identation.Angelos D. Keromytis
1999-12-04Deprecate -local flag.Angelos D. Keromytis
1999-11-04Support IPsec bypass flows. (ok angelos@, niklas@)Hakan Olsson
1999-09-07Add {newline, usage()} to 'unknown command' message.Hakan Olsson
1999-08-25Fix usage message, fix flow logic.Angelos D. Keromytis
1999-08-05Add 'ipsecadm flush' to do what 'route flush -encap' doesn't manage.Hakan Olsson
Sync manpage and fix a couple of typos.
1999-07-15SPI 0 is the one we use for demand keying, IANA reserved SPIs are notNiklas Hallqvist
allowed
1999-07-02rename SADB_foo_X_bar to SADB_X_foo_barTheo de Raadt
1999-06-05fix another inet_aton()Theo de Raadt
1999-06-05use inet_aton()Theo de Raadt
1999-04-18missing iscmdNiels Provos
1999-03-29make it compileNiels Provos
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
1999-03-15explain EPROTONOSUPPORT; nash@mcs.netTheo de Raadt
1999-03-04Fix -proto2 numeric protocol handling.Angelos D. Keromytis
1999-02-27authkey not authp; Markus.Friedl@informatik.uni-erlangen.deTheo de Raadt
1999-02-26Print warning when using DES or Skipjack for encryption.Angelos D. Keromytis
1999-02-26Pretty usage message.Angelos D. Keromytis
1999-02-25Listen to kernel replies and report errors (much room for improvementAngelos D. Keromytis
there), fix a typo in a warning message, prettier error messages.
1999-02-25Fix missing include file, after the re-positioning of sockaddr_unionAngelos D. Keromytis
1999-02-25Fix bug that didn't allow use of sha1/md5.Angelos D. Keromytis
1999-02-24Copyright update.Angelos D. Keromytis
1999-02-24Remove unnecessary file, move man page to section 8.Angelos D. Keromytis
1999-02-24Almost rewritten ipsecadm to use pfkey. Error reporting is a bit lacking still.Angelos D. Keromytis
1999-02-17ipsec skipjack, based on free .fi code (some .gov type will test this for me)Theo de Raadt
1999-02-13Verify that keys and IVs are in hex.Angelos D. Keromytis
1998-11-14move ipsec tools into .Theo de Raadt