Age | Commit message (Collapse) | Author |
|
with Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@
|
|
are identified on a SIGUP or INADDR_ANY packet).
|
|
|
|
Disabled, has no configuration mechanism yet. This will be used for roaming
users, who are going to get parameters like IP-address and nameserver from its
peer, very much like DHCP, but securily inside an ISAKMP connection and still
in time before negotiation of IPsec connections. You may see stylistic fixes
in this commit too. Add some not yet used Makefile magic to deal with DNSSEC-
enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc.
Thank you! Configuration will come very soon, btw.
|
|
|
|
|
|
|
|
author: niklas
Remove the log_fatal point
|
|
regress/x509/x509test.c: Merge with EOM 1.7
DESIGN-NOTES: Merge with EOM 1.48
README.PKI: Merge with EOM 1.6
TO-DO: Merge with EOM 1.44
cert.c: Merge with EOM 1.12
author: niklas
Add support for dynamic loading of optional facilities, libcrypto first.
|
|
BUGS: Merge with EOM 1.32
author: niklas
Up-to-date
|
|
author: niklas
More stuff to do
|
|
author: niklas
More stuff
|
|
TO-DO: Merge with EOM 1.40
author: niklas
Up-to-date
|
|
author: niklas
Style nits
author: ho
Perhaps look into IPCOMP soon?
|
|
author: niklas
Mention flow cleanup
|
|
sa.c: Merge with EOM 1.90
message.c: Merge with EOM 1.131
message.h: Merge with EOM 1.47
author: niklas
Send DELETE payloads in informational exchanges
|
|
README: Merge with EOM 1.21
TO-DO: Merge with EOM 1.35
author: niklas
Up-to-date
|
|
DESIGN-NOTES: Merge with EOM 1.41
author: niklas
Up-to-date
|
|
Up-to-date
Up-to-date
Garbage collect transports via refcounting. Fix commentary.
up-to-date
|
|
Reflect reality
|
|
|
|
|
|
|
|
|
|
|
|
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by
Ericsson Radio Systems. It is not yet complete or usable in a real scenario
but the missing pieces will soon be there. The early commit is for people
who wants early access and who are not afraid of looking at source.
isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so
far, so it is not that incomplete. It is really mostly configuration that
is lacking.
|