Age | Commit message (Collapse) | Author |
|
|
|
ok david msf
|
|
|
|
|
|
necessarily set anymore, as now the peer can be left out.
|
|
|
|
which were recently added to isakmpd. ok hshoexer@, markus@
|
|
information for AH SAs. ok markus@, hshoexer@
|
|
|
|
keying. markus@ seconds this, so use AES CBC as default.
ok naddy@
|
|
Prodded by david@, thanks!
|
|
not of correct size. Suggested by david@
|
|
heavyweight. Testing by Jason George, thanks!
|
|
|
|
|
|
|
|
|
|
"looks right" hshoexer@
|
|
fixes ike29.in in regress
looks right hshoexer@, ok naddy@
|
|
reference quick mode lifetimes, too, not main mode lifetimes.
Otherwise we might dereference a NULL pointer...
|
|
|
|
naddy@, ok naddy@.
|
|
|
|
|
|
|
|
|
|
|
|
"put it in if it doesn't break regress" hshoexer@
|
|
|
|
the output of ispecctl matches its input
|
|
|
|
can only be set globally (ie. Default-phase-[12]-lifetime).
|
|
|
|
|
|
compact which will soon simplify my life.
|
|
|
|
put back one mistakenly deleted newline.
ok hshoexer@
|
|
|
|
for lifetime support.
|
|
|
|
|
|
|
|
|
|
|
|
more than one ISAKMP ID on the local peer.
ok hshoexer@
|
|
flow proto udp from 1.2.3.4 port ntp to 5.6.7.8
ok hshoexer@ msf@
|
|
|
|
the in-kernel SAs. this way we produce the same output as rule loading
ok hshoexer
|
|
rule type "group". Needed for grouping.
|
|
|