Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
|
|
hshoexer@ ok.
|
|
|
|
ok ho@ deraadt@ markus@
|
|
with Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@
|
|
Niels Provos.
|
|
There are some kinks left, so keep it default disabled for now.
markus@ says ok to commit.
|
|
Linux IPSec.
|
|
|
|
|
|
configuration method. Documentation will follow.
|
|
|
|
|
|
|
|
|
|
Disabled, has no configuration mechanism yet. This will be used for roaming
users, who are going to get parameters like IP-address and nameserver from its
peer, very much like DHCP, but securily inside an ISAKMP connection and still
in time before negotiation of IPsec connections. You may see stylistic fixes
in this commit too. Add some not yet used Makefile magic to deal with DNSSEC-
enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc.
Thank you! Configuration will come very soon, btw.
|
|
|
|
|
|
|
|
|
|
|
|
this works on both systems (for this special case).
|
|
by newsham@lava.net)
|
|
|
|
validated KEY records. Uses lwresd from the bind-9.1.0 port.
Enable by adding 'dnssec' to FEATURES.
|
|
author: niklas
correct test for GMP feature
|
|
author: niklas
Add back an example of empty FEATURES
author: niklas
Well, show how to add -g in different OSes
author: itojun
make -g really work
author: ho
Revert. Features should not depend on other stuff,
it should be the other way around.
author: ho
Ok, make it work this time.
author: ho
Only add 'policy' feature if USE_KEYNOTE is active.
|
|
author: niklas
Argh I always manage to commit my local DEBUG=-g change by mistake
author: niklas
oops in last commit
author: niklas
Install sample files
|
|
author: niklas
Make gmp a feature, which we do not use normally
author: niklas
I am probably breaking the other OSes now, but FEATURES really
belong here. Also add MP_FLAVOUR setting.
author: ho
Revert to manual OS selection. Remove FEATURES definition.
author: ho
Removed unused stuff.
author: ho
Another way to do multiple OSes
author: ho
Work around missing :U for features, get OS from uname.
|
|
regress/dh/Makefile: Merge with EOM 1.7
regress/group/Makefile: Merge with EOM 1.9
regress/prf/Makefile: Merge with EOM 1.4
regress/rsakeygen/Makefile: Merge with EOM 1.8
regress/x509/Makefile: Merge with EOM 1.10
Makefile: Merge with EOM 1.62
attribute.c: Merge with EOM 1.10
sa.c: Merge with EOM 1.99
conf.c: Merge with EOM 1.20
crypto.c: Merge with EOM 1.28
isakmpd.c: Merge with EOM 1.45
connection.c: Merge with EOM 1.19
doi.h: Merge with EOM 1.28
field.c: Merge with EOM 1.11
exchange.c: Merge with EOM 1.116
ike_auth.c: Merge with EOM 1.44
pf_key_v2.c: Merge with EOM 1.37
ike_phase_1.c: Merge with EOM 1.22
ipsec.c: Merge with EOM 1.118
isakmp_doi.c: Merge with EOM 1.40
log.c: Merge with EOM 1.26
log.h: Merge with EOM 1.18
math_group.c: Merge with EOM 1.23
message.c: Merge with EOM 1.144
pf_encap.c: Merge with EOM 1.70
policy.c: Merge with EOM 1.18
timer.c: Merge with EOM 1.13
transport.c: Merge with EOM 1.41
udp.c: Merge with EOM 1.47
ui.c: Merge with EOM 1.37
x509.c: Merge with EOM 1.36
author: niklas
Made debug logging a compile time selectable feature
|
|
crypto.c: Merge with EOM 1.27
exchange.c: Merge with EOM 1.115
ike_quick_mode.c: Merge with EOM 1.115
x509.c: Merge with EOM 1.35
features/ec: Merge with EOM 1.1
features/aggressive: Merge with EOM 1.1
features/policy: Merge with EOM 1.1
features/x509: Merge with EOM 1.1
author: niklas
Allow isakmpd builders to remove optional parts and save bytes.
|
|
author: niklas
Add FreeBSD support
author: angelos
Manpage support in the Makefiles, mention in README.
|
|
|
|
|
|
author: niklas
Support dynamic loading of libkeynote too. Build isakmpd static by default.
Stylistic cleanup of keynote policy code. Correct some libcrypto calls.
author: angelos
Complete policy work; tested for the shared-key case. Documentation needed.
author: niklas
Add support for dynamic loading of optional facilities, libcrypto first.
|
|
regress/rsakeygen/rsakeygen.c: Merge with EOM 1.8
regress/x509/Makefile: Merge with EOM 1.6
regress/x509/x509test.c: Merge with EOM 1.6
regress/Makefile: Merge with EOM 1.8
samples/VPN-east.conf: Merge with EOM 1.6
samples/VPN-west.conf: Merge with EOM 1.6
samples/singlehost-east.conf: Merge with EOM 1.3
samples/singlehost-west.conf: Merge with EOM 1.3
sysdep/openbsd/Makefile.sysdep: Merge with EOM 1.5
x509.h: Merge with EOM 1.6
x509.c: Merge with EOM 1.17
DESIGN-NOTES: Merge with EOM 1.46
Makefile: Merge with EOM 1.55
cert.c: Merge with EOM 1.11
cert.h: Merge with EOM 1.6
exchange.c: Merge with EOM 1.109
exchange.h: Merge with EOM 1.26
ike_auth.c: Merge with EOM 1.32
ike_phase_1.c: Merge with EOM 1.7
init.c: Merge with EOM 1.16
isakmpd.conf.5: Merge with EOM 1.27
README.PKI: Merge with EOM 1.1
author: niklas
From Niels Provos, edited by me: certificate support using SSLeay
|
|
author: ho
Remove a trailing backslash.
author: niklas
OpenBSD with PF_KEY is now the default
author: niklas
Oops, we have not gone to 2.5 as a base for EOM yet.
|
|
|
|
DESIGN-NOTES: Merge with EOM 1.42
Makefile: Merge with EOM 1.51
app.c: Merge with EOM 1.6
conf.c: Merge with EOM 1.18
init.c: Merge with EOM 1.14
isakmpd.conf.5: Merge with EOM 1.19
pf_encap.c: Merge with EOM 1.64
pf_encap.h: Merge with EOM 1.12
pf_key_v2.h: Merge with EOM 1.3
sysdep.h: Merge with EOM 1.16
transport.c: Merge with EOM 1.40
ui.c: Merge with EOM 1.32
author: niklas
A new connection abstraction
|
|
author: niklas
Heh forgot to comment out the boehm-gc defines
|
|
author: niklas
Remove warnings when finding leaks with Boehm GC
|
|
Let's get aggressive!
Comments are not good at the end of an assignment line
Make PF_ENCAP and PF_KEY versions of OpenBSD support separated through the OS
make variable of the top Makefile.
Add commented out usages of Boehm's GC library
LDADD and DPADD should be appended to. 1999 (c). Style.
|
|
|
|
Makefile.inc -> Makefile.sysdep
Make SUBDIR changeable by the OS support
sysdep/openbsd/Makefile.sysdep: Merge with EOM 1.1
Makefile.inc -> Makefile.sysdep
|
|
| revision 1.41
| date: 1999/02/25 15:53:37; author: niklas; state: Exp; lines: +5 -3
| sysdep Makefile fragments
| ----------------------------
| revision 1.40
| date: 1999/02/25 15:07:27; author: niklas; state: Exp; lines: +3 -4
| Mesing with the new sysdep paths
| ----------------------------
| revision 1.39
| date: 1999/02/25 14:17:43; author: niklas; state: Exp; lines: +11 -4
| Prepare for PF_KEY
| ----------------------------
| revision 1.38
| date: 1999/02/25 14:01:35; author: niklas; state: Exp; lines: +17 -4
| Better OS-dependency layout
| ----------------------------
|
|
|