summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/conf.h
AgeCommit message (Collapse)Author
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-05-14Some more KNF, no binary change.Hans-Joerg Hoexer
ok ho@
2004-04-23Make sure KEY_LENGTH attribute is present when checking AES proposals,Hakan Olsson
required when acting as responder to SafeNet peers. Also make conf_load_defaults() readable again (KNF). hshoexer@ ok.
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-04-07-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-03-19Add missing bits to make already present privsep code work. Enable privsep.Hans-Joerg Hoexer
ok ho@ deraadt@ markus@
2003-06-03Remove clauses 3 and 4. With approval from Niklas Hallqvist andHakan Olsson
Niels Provos.
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
There are some kinks left, so keep it default disabled for now. markus@ says ok to commit.
2003-05-14Default public key directory definition sanity.Hakan Olsson
2003-02-04default to 3DES-SHA-RSA_SIG (same as in OpenBSD 3.2); ok ho@Markus Friedl
2003-01-09Default-Phase-1-Configuration --> Default-phase-1-configurationHakan Olsson
2002-11-15Missing "Configuration" tag in a Phase-1 peer was not handled correctly,Hakan Olsson
pointed out by Aref Taidi. Replace this with a "Default-Phase-1-Configuration" that will be used if this tag is missing from the peer. Update manpage accordingly. niklas@ ok.
2002-11-14Better whitespace/newline handling, this should make broken lines andHakan Olsson
multiple values parse correctly again, as well as fix PR#2974. Also fix some int/u_int mismatches, and remove conf_get_line() (obsolete).
2002-08-07A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.Hakan Olsson
Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated.
2002-08-02CRL support for isakmpd. From <Thomas.Walpuski@gmx.net> with some minorHakan Olsson
modifications by me. ok niklas@.
2001-06-29Provide an API to get sockaddrs out of the config dbNiklas Hallqvist
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26Pedantic style policeNiklas Hallqvist
2000-10-07conf.h: Merge with EOM 1.13Niklas Hallqvist
gmp_util.c: Merge with EOM 1.7 isakmpd.conf.5: Merge with EOM 1.47 author: ho (c)-2000
2000-06-08Merge with EOM 1.12Niklas Hallqvist
author: angelos Default value for [KeyNote]:Credential-directory.
2000-05-02conf.h: Merge with EOM 1.11Niklas Hallqvist
ui.c: Merge with EOM 1.41 author: niklas From ho: provide defaults for requested transforms, shortens config files vastly.
1999-08-05DESIGN-NOTES: Merge with EOM 1.47Niklas Hallqvist
conf.c: Merge with EOM 1.19 conf.h: Merge with EOM 1.10 ui.c: Merge with EOM 1.34 author: niklas Dynamic updates of the configuration database is now possible, either through ui, or through the new conf_* API described in DESIGN-NOTES
1999-07-18conf.h: Merge with EOM 1.9Niklas Hallqvist
isakmpd.8: Merge with EOM 1.15 author: niklas Moving /etc/isakmpd.conf to /etc/isakmpd/isakmpd.conf.
1999-04-19./app.c: Merge with EOM 1.5Niklas Hallqvist
./gmp_util.c: Merge with EOM 1.3 ./asn_useful.c: Merge with EOM 1.11 ./attribute.c: Merge with EOM 1.9 ./constants.c: Merge with EOM 1.7 ./doi.h: Merge with EOM 1.25 ./doi.c: Merge with EOM 1.4 ./field.c: Merge with EOM 1.9 ./init.c: Merge with EOM 1.13 ./isakmp_doi.c: Merge with EOM 1.35 ./prf.c: Merge with EOM 1.6 ./util.c: Merge with EOM 1.14 ./app.h: Merge with EOM 1.4 ./conf.h: Merge with EOM 1.8 ./ipsec.h: Merge with EOM 1.34 ./ipsec_doi.h: Merge with EOM 1.10 ./pkcs.h: Merge with EOM 1.8 ./sysdep.h: Merge with EOM 1.15 1999 copyrights
1999-03-02conf.c: Merge with EOM 1.15Niklas Hallqvist
One include too much conf.h: Merge with EOM 1.7 Forgotten include file
1999-02-26Merge from the Ericsson repositoryNiklas Hallqvist
| revision 1.6 | date: 1999/02/25 11:09:32; author: niklas; state: Exp; lines: +2 -2 | Make conf_get_num take a default value to give back when tag does not exist | ----------------------------
1998-11-20Add iterator for tags in a section. Add range checking for numbers.Niklas Hallqvist
1998-11-17Add RCS Ids from the EOM repositoryNiklas Hallqvist
1998-11-15openBSD RCS IDsNiklas Hallqvist
1998-11-15Initial import of isakmpd, an IKE (ISAKMP/Oakley) implementation for theNiklas Hallqvist
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by Ericsson Radio Systems. It is not yet complete or usable in a real scenario but the missing pieces will soon be there. The early commit is for people who wants early access and who are not afraid of looking at source. isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so far, so it is not that incomplete. It is really mostly configuration that is lacking.