summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/conf.c
AgeCommit message (Collapse)Author
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-08keynote and policy always compiled inTheo de Raadt
2005-04-08un-ifdef USE_BLOWFISHTheo de Raadt
2005-04-06knf, ok cloderTheo de Raadt
2005-04-05Always compile X509 support. Almost everyone uses it. Makes the codeChad Loder
much easier to read and to maintain. OK and testing by hshoexer@, more testing by me
2005-04-04spacing; ok cloderTheo de Raadt
2005-03-15reset config line numbers, when daemon gets reinitialized.Moritz Jodeit
prevents wrong line numbers in error cases. help from jaredy@ and ok hshoexer@.
2005-03-10Avoid memory leak if strdup should fail.Chad Loder
OK hshoexer@
2004-12-14Allow the Address, Network, or Netmask values of the <IPsec-ID> to beRyan Thomas McBride
specified with an interface name (in which case the first address is used) or the keyword 'default' (in which case the address is selected based on the default route). eg: [roadwarrior-ip] ID-type= IPV4_ADDR Address= default ok ho@ hshoexer@
2004-08-08spacingTheo de Raadt
2004-07-29Less noise while debugging.Hakan Olsson
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-14avoid stat before openHans-Joerg Hoexer
ok ho@
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-05-14Some more KNF, no binary change.Hans-Joerg Hoexer
ok ho@
2004-04-23Make sure KEY_LENGTH attribute is present when checking AES proposals,Hakan Olsson
required when acting as responder to SafeNet peers. Also make conf_load_defaults() readable again (KNF). hshoexer@ ok.
2004-04-15more knf; ok hshoexerTheo de Raadt
2004-04-15knfTheo de Raadt
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-03-19Add missing bits to make already present privsep code work. Enable privsep.Hans-Joerg Hoexer
ok ho@ deraadt@ markus@
2004-02-27Add group 14 (modp2048) to predefined suites. Manpage also updated.Hans-Joerg Hoexer
ok ho@
2004-01-06small typos fixed.Hans-Joerg Hoexer
ok markus@
2003-09-02A couple of nits. deraadt@ ok.Hakan Olsson
2003-08-28support AES in phase 1, too. switch to OpenSSL EVP interface;Markus Friedl
with Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@
2003-07-25add sha2 support; ok ho@Markus Friedl
2003-06-10boring cleanupsTheo de Raadt
2003-06-03Remove clauses 3 and 4. With approval from Niklas Hallqvist andHakan Olsson
Niels Provos.
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2003-05-18More isakmpd privsep work. X509 private keys are now kept in the privilegedHakan Olsson
process only. Various cleanup and bugfixes. markus@ ok
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
There are some kinks left, so keep it default disabled for now. markus@ says ok to commit.
2003-05-14Default public key directory definition sanity.Hakan Olsson
2003-04-30cast size_t to unsigned long and use %lu;ok hoJason Wright
2003-02-04don't set the Transform for Default-phase-1-configuration twice, ok ho@Markus Friedl
2002-12-06Section and tag comparisions should be case-insensitive. PR#3010, Mike Neuman.Hakan Olsson
2002-11-15Missing "Configuration" tag in a Phase-1 peer was not handled correctly,Hakan Olsson
pointed out by Aref Taidi. Replace this with a "Default-Phase-1-Configuration" that will be used if this tag is missing from the peer. Update manpage accordingly. niklas@ ok.
2002-11-14Better whitespace/newline handling, this should make broken lines andHakan Olsson
multiple values parse correctly again, as well as fix PR#2974. Also fix some int/u_int mismatches, and remove conf_get_line() (obsolete).
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-08-07A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.Hakan Olsson
Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated.
2002-08-02CRL support for isakmpd. From <Thomas.Walpuski@gmx.net> with some minorHakan Olsson
modifications by me. ok niklas@.
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-05-28off_t to size_t change for printf format and malloc. Pointed out by ↵Hakan Olsson
<greg@nest.cx>
2002-04-29wierd -> weirdPeter Valchev
2002-04-22Handle configuration lines that end in whitespace or ^M.Hakan Olsson
Also avoid a potential memory leak.
2002-03-01Change DH group handling in the pre-generated parts of theHakan Olsson
configuration. Add a -GRP{1,2,5} component to transform and suite names to directly specify which group to use. If no group is specified, use DH group 2 (MODP_1024). Earlier transforms and suites using the MD5 hash defaulted to DH group 1, this is no longer true. niklas@ ok.
2002-01-23the last few sprintf -> snprintfHakan Olsson
2002-01-03str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintfHakan Olsson
2001-10-05Missed this file; some more debug level fixes.Hakan Olsson
2001-07-05Add prototypes and some other various cleanup.Hakan Olsson
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-01 01:55:45 +0000