summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/conf.c
AgeCommit message (Collapse)Author
2002-03-01Change DH group handling in the pre-generated parts of theHakan Olsson
configuration. Add a -GRP{1,2,5} component to transform and suite names to directly specify which group to use. If no group is specified, use DH group 2 (MODP_1024). Earlier transforms and suites using the MD5 hash defaulted to DH group 1, this is no longer true. niklas@ ok.
2002-01-23the last few sprintf -> snprintfHakan Olsson
2002-01-03str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintfHakan Olsson
2001-10-05Missed this file; some more debug level fixes.Hakan Olsson
2001-07-05Add prototypes and some other various cleanup.Hakan Olsson
2001-07-01StyleNiklas Hallqvist
2001-06-29Provide an API to get sockaddrs out of the config dbNiklas Hallqvist
2001-03-27(c)-2001Hakan Olsson
2001-03-13Somewhere along the line we stopped using the configuration file defaultsHakan Olsson
properly. Make them work again. (niklas@ ok)
2001-02-28Make sure the default lifetimes in the General section are taken intoAngelos D. Keromytis
consideration.
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26Pedantic style policeNiklas Hallqvist
2000-12-12Merge with EOM 1.48Niklas Hallqvist
author: angelos Add Default-phase-1-ID tag in [General], and document its use. author: angelos Default Phase 1 entry.
2000-10-27conf.c: Merge with EOM 1.46Niklas Hallqvist
util.c: Merge EOM diff 1.20 - 1.21, i.e. 1.19 is still left to be merged author: ho Use stat(), not lstat().
2000-10-26Merge with EOM 1.45Niklas Hallqvist
author: niklas fgetc returns int not char; Boris Prochazka <boris@stargate.ipunplugged.com>
2000-10-16Merge with EOM 1.44Niklas Hallqvist
author: angelos Just to be on the safe side, use a struct stat. author: angelos Only do the secrecy check and parse the configuration file if it actually exists. author: angelos Actually create all the pre-configured Transforms and Suites, even if the user doesn't actually define them in the configuration file; ugly kludge, but it allows use of isakmpd without a configuration file. author: angelos Add RIPEMD negotiation/configuration.
2000-10-13regress/b2n/Makefile: Merge with EOM 1.12Niklas Hallqvist
regress/ec2n/Makefile: Merge with EOM 1.9 conf.c: Merge with EOM 1.40 util.c: Merge with EOM 1.17 author: ho Add file permission check to private key file. Split out check function to util.c.
2000-10-13Merge with EOM 1.39Niklas Hallqvist
author: ho Revert. Be strict about file mode.
2000-10-13Merge with EOM 1.38Niklas Hallqvist
author: ho Warn but continue on isakmpd.conf permissions.
2000-10-09samples/VPN-3way-template.conf: Merge with EOM 1.8Niklas Hallqvist
samples/VPN-east.conf: Merge with EOM 1.12 samples/VPN-west.conf: Merge with EOM 1.13 samples/policy: Merge with EOM 1.6 samples/singlehost-west.conf: Merge with EOM 1.9 samples/singlehost-east.conf: Merge with EOM 1.9 conf.c: Merge with EOM 1.37 ipsec.c: Merge with EOM 1.133 ipsec_num.cst: Merge with EOM 1.4 isakmpd.conf.5: Merge with EOM 1.48 isakmpd.policy.5: Merge with EOM 1.21 policy.c: Merge with EOM 1.46 author: angelos AES support.
2000-10-07Merge with EOM 1.36Niklas Hallqvist
author: niklas Remove some spaces author: niklas do not crash on empty config files author: ho (c)-2000 author: provos style as pointed out by the code style pedant. author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-06-08Merge with EOM 1.31Niklas Hallqvist
author: angelos Initialize [Keynote]:Credential-directory. author: ho Autogenerated p1/p2 default lifetimes can be defined in config. author: niklas style
2000-05-03Merge with EOM 1.28Niklas Hallqvist
author: niklas style fascism author: ho style fix author: ho Typo in comment. author: ho Typo; Cers-directory -> Cert-directory author: ho Do not load configuration if isakmpd.conf is not owned by the user running isakmpd. Also, do not load config if file modes are too open. Do not warn about ignored duplicate tags when they are autogenerated. author: niklas From ho: provide defaults for requested transforms, shortens config files vastly.
2000-05-02Merge with EOM 1.26Niklas Hallqvist
author: ho Typo in comment. author: ho Typo; Cers-directory -> Cert-directory author: ho Do not load configuration if isakmpd.conf is not owned by the user running isakmpd. Also, do not load config if file modes are too open. Do not warn about ignored duplicate tags when they are autogenerated. author: niklas From ho: provide defaults for requested transforms, shortens config files vastly.
2000-04-07conf.c: Merge with EOM 1.22Niklas Hallqvist
gmp_util.c: Merge with EOM 1.5 gmp_util.h: Merge with EOM 1.3 math_mp.h: Merge with EOM 1.2 sa.c: Merge with EOM 1.101 ui.c: Merge with EOM 1.40 author: niklas (c) 2000
2000-04-07conf.c: Merge with EOM 1.21Niklas Hallqvist
isakmpd.c: Merge with EOM 1.46 sa.c: Merge with EOM 1.100 ui.c: Merge with EOM 1.39 author: niklas error message style
2000-02-25regress/crypto/Makefile: Merge with EOM 1.5Niklas Hallqvist
regress/dh/Makefile: Merge with EOM 1.7 regress/group/Makefile: Merge with EOM 1.9 regress/prf/Makefile: Merge with EOM 1.4 regress/rsakeygen/Makefile: Merge with EOM 1.8 regress/x509/Makefile: Merge with EOM 1.10 Makefile: Merge with EOM 1.62 attribute.c: Merge with EOM 1.10 sa.c: Merge with EOM 1.99 conf.c: Merge with EOM 1.20 crypto.c: Merge with EOM 1.28 isakmpd.c: Merge with EOM 1.45 connection.c: Merge with EOM 1.19 doi.h: Merge with EOM 1.28 field.c: Merge with EOM 1.11 exchange.c: Merge with EOM 1.116 ike_auth.c: Merge with EOM 1.44 pf_key_v2.c: Merge with EOM 1.37 ike_phase_1.c: Merge with EOM 1.22 ipsec.c: Merge with EOM 1.118 isakmp_doi.c: Merge with EOM 1.40 log.c: Merge with EOM 1.26 log.h: Merge with EOM 1.18 math_group.c: Merge with EOM 1.23 message.c: Merge with EOM 1.144 pf_encap.c: Merge with EOM 1.70 policy.c: Merge with EOM 1.18 timer.c: Merge with EOM 1.13 transport.c: Merge with EOM 1.41 udp.c: Merge with EOM 1.47 ui.c: Merge with EOM 1.37 x509.c: Merge with EOM 1.36 author: niklas Made debug logging a compile time selectable feature
1999-08-05DESIGN-NOTES: Merge with EOM 1.47Niklas Hallqvist
conf.c: Merge with EOM 1.19 conf.h: Merge with EOM 1.10 ui.c: Merge with EOM 1.34 author: niklas Dynamic updates of the configuration database is now possible, either through ui, or through the new conf_* API described in DESIGN-NOTES
1999-05-01sysdep/openbsd/sysdep.c: Merge with EOM 1.7Niklas Hallqvist
DESIGN-NOTES: Merge with EOM 1.42 Makefile: Merge with EOM 1.51 app.c: Merge with EOM 1.6 conf.c: Merge with EOM 1.18 init.c: Merge with EOM 1.14 isakmpd.conf.5: Merge with EOM 1.19 pf_encap.c: Merge with EOM 1.64 pf_encap.h: Merge with EOM 1.12 pf_key_v2.h: Merge with EOM 1.3 sysdep.h: Merge with EOM 1.16 transport.c: Merge with EOM 1.40 ui.c: Merge with EOM 1.32 author: niklas A new connection abstraction
1999-04-05Merge with EOM 1.17Niklas Hallqvist
memory leak fixes 1999 copyrights
1999-03-02conf.c: Merge with EOM 1.15Niklas Hallqvist
One include too much conf.h: Merge with EOM 1.7 Forgotten include file
1999-02-26Merge from the Ericsson repositoryNiklas Hallqvist
| revision 1.14 | date: 1999/02/25 11:38:47; author: niklas; state: Exp; lines: +3 -1 | include sysdep.h everywhere | ---------------------------- | revision 1.13 | date: 1999/02/25 11:09:31; author: niklas; state: Exp; lines: +7 -4 | Make conf_get_num take a default value to give back when tag does not exist | ---------------------------- | revision 1.12 | date: 1999/01/31 01:20:42; author: niklas; state: Exp; lines: +7 -1 | on-demand keying | ----------------------------
1998-12-21Remove bogus check of printableness of the config fileNiklas Hallqvist
1998-11-20Add iterator for tags in a section. Add range checking for numbers.Niklas Hallqvist
1998-11-17Add RCS Ids from the EOM repositoryNiklas Hallqvist
1998-11-15openBSD RCS IDsNiklas Hallqvist
1998-11-15Initial import of isakmpd, an IKE (ISAKMP/Oakley) implementation for theNiklas Hallqvist
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by Ericsson Radio Systems. It is not yet complete or usable in a real scenario but the missing pieces will soon be there. The early commit is for people who wants early access and who are not afraid of looking at source. isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so far, so it is not that incomplete. It is really mostly configuration that is lacking.