summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/cert.c
AgeCommit message (Collapse)Author
2007-08-05Allow key exchange with RSA signature authentication to work withTom Cosgrove
Cisco IOS and other initiators that only send their certs in response to CERT_REQUEST. With input and help from cloder@, Stuart Henderson, mpf@, and several others who did lots of testing - thanks to all. ok hshoexer@
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-08keynote and policy always compiled inTheo de Raadt
2005-04-05Always compile X509 support. Almost everyone uses it. Makes the codeChad Loder
much easier to read and to maintain. OK and testing by hshoexer@, more testing by me
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-05-14Some more KNF, no binary change.Hans-Joerg Hoexer
ok ho@
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-03-31-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2003-06-03Remove clauses 3 and 4. With approval from Niklas Hallqvist andHakan Olsson
Niels Provos.
2002-08-07A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.Hakan Olsson
Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated.
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-06Style, and a few additional format/type mods.Hakan Olsson
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2001-11-03We get ssl.h with x509.h/libcrypto.hHakan Olsson
2001-06-05Style issues and commentaryNiklas Hallqvist
2001-05-31Expand the X509 and KeyNote cert handlers.Angelos D. Keromytis
2000-10-07cert.c: Merge with EOM 1.18Niklas Hallqvist
cert.h: Merge with EOM 1.8 libcrypto.c: Merge with EOM 1.14 policy.h: Merge with EOM 1.12 x509.h: Merge with EOM 1.11 author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking.
2000-06-08Merge with EOM 1.17Niklas Hallqvist
author: angelos Some more support for KeyNote credential exchange (not yet done).
2000-04-07Merge with EOM 1.16Niklas Hallqvist
author: ho Missing #ifdef USE_X509 added
2000-03-08cert.c: Merge with EOM 1.15Niklas Hallqvist
libcrypto.h: Merge with EOM 1.12 author: ho KAME and ssl includes
2000-02-19cert.c: Merge with EOM 1.14Niklas Hallqvist
ike_auth.c: Merge with EOM 1.43 ike_phase_1.c: Merge with EOM 1.21 init.c: Merge with EOM 1.24 ipsec.c: Merge with EOM 1.117 isakmpd.c: Merge with EOM 1.44 math_group.c: Merge with EOM 1.22 author: niklas Copyright 2000 author: niklas Allow isakmpd builders to remove optional parts and save bytes.
1999-08-26regress/rsakeygen/rsakeygen.c: Merge with EOM 1.9Niklas Hallqvist
regress/x509/x509test.c: Merge with EOM 1.7 DESIGN-NOTES: Merge with EOM 1.48 README.PKI: Merge with EOM 1.6 TO-DO: Merge with EOM 1.44 cert.c: Merge with EOM 1.12 author: niklas Add support for dynamic loading of optional facilities, libcrypto first.
1999-07-17regress/rsakeygen/Makefile: Merge with EOM 1.4Niklas Hallqvist
regress/rsakeygen/rsakeygen.c: Merge with EOM 1.8 regress/x509/Makefile: Merge with EOM 1.6 regress/x509/x509test.c: Merge with EOM 1.6 regress/Makefile: Merge with EOM 1.8 samples/VPN-east.conf: Merge with EOM 1.6 samples/VPN-west.conf: Merge with EOM 1.6 samples/singlehost-east.conf: Merge with EOM 1.3 samples/singlehost-west.conf: Merge with EOM 1.3 sysdep/openbsd/Makefile.sysdep: Merge with EOM 1.5 x509.h: Merge with EOM 1.6 x509.c: Merge with EOM 1.17 DESIGN-NOTES: Merge with EOM 1.46 Makefile: Merge with EOM 1.55 cert.c: Merge with EOM 1.11 cert.h: Merge with EOM 1.6 exchange.c: Merge with EOM 1.109 exchange.h: Merge with EOM 1.26 ike_auth.c: Merge with EOM 1.32 ike_phase_1.c: Merge with EOM 1.7 init.c: Merge with EOM 1.16 isakmpd.conf.5: Merge with EOM 1.27 README.PKI: Merge with EOM 1.1 author: niklas From Niels Provos, edited by me: certificate support using SSLeay
1999-04-19./cert.c: Merge with EOM 1.10Niklas Hallqvist
./x509.c: Merge with EOM 1.13 Style Style. alloc error reporting. Math error propagation. Allocate right sizes. 1999 copyrights
1999-02-26Merge from the Ericsson repositoryNiklas Hallqvist
| revision 1.7 | date: 1999/02/25 11:38:45; author: niklas; state: Exp; lines: +3 -1 | include sysdep.h everywhere | ----------------------------
1998-11-17Add RCS Ids from the EOM repositoryNiklas Hallqvist
1998-11-16Reinstate X509 signature code except for RSA codeNiklas Hallqvist
1998-11-16Remove X509 hooksNiklas Hallqvist
1998-11-16reviveNiklas Hallqvist
1998-11-15Not clean enough yetNiklas Hallqvist
1998-11-15openBSD RCS IDsNiklas Hallqvist
1998-11-15Initial import of isakmpd, an IKE (ISAKMP/Oakley) implementation for theNiklas Hallqvist
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by Ericsson Radio Systems. It is not yet complete or usable in a real scenario but the missing pieces will soon be there. The early commit is for people who wants early access and who are not afraid of looking at source. isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so far, so it is not that incomplete. It is really mostly configuration that is lacking.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-13 07:18:18 +0000