summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/dnssec.c
AgeCommit message (Collapse)Author
2015-08-20<stdlib.h> is included, so do not need to cast result fromTheo de Raadt
malloc, calloc, realloc* ok krw millert
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-04spacing; ok cloderTheo de Raadt
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-05-14Some more KNF, no binary change.Hans-Joerg Hoexer
ok ho@
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2003-11-06Style nits.Hakan Olsson
2003-06-03Remove clauses 3 and 4. With approval from Niklas Hallqvist andHakan Olsson
Niels Provos.
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2002-06-10The dlopen() stuff goes away.Hakan Olsson
2002-06-09rm trailing whitespaceTodd T. Fries
2002-01-03str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintfHakan Olsson
2001-08-23recieve -> receiveAaron Campbell
2001-08-22USER_FQDN ID support, untested.Hakan Olsson
2001-08-17Rewrite to do lookups depending on ID type. IPv4 and FQDN only for now.Hakan Olsson
2001-08-16add support for getrrsetbyname(3) from libc. ok ho@.Jakob Schlyter
2001-07-01Remove inaccurate "Assumes IPv4" comments.Angelos D. Keromytis
2001-06-29Change get_src/get_dst API as we get the length with sa_len.Hakan Olsson
2001-06-29Don't assume IPv4. Initial IPv6 support.Hakan Olsson
2001-06-27Consistently use "IPsec" capitalization (jsyn@nthought.com)Angelos D. Keromytis
2001-01-27Call OpenSSL functions with LC (). Various style nits.Hakan Olsson
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26Preliminary but working code to permit IKE authentication using DNSSECHakan Olsson
validated KEY records. Uses lwresd from the bind-9.1.0 port. Enable by adding 'dnssec' to FEATURES.