Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-06-02 | Big spelling cleanup, no binary change. From david@ | Hans-Joerg Hoexer | |
2006-05-31 | Make sure, that phase 1 SAs of active connections stay alive. Fixes a DPD | Hans-Joerg Hoexer | |
breakage noticed and reported by Mitja Muzenic. ok markus@ ho@, testing by Mitja and cloder@, discussed with Nathanael. | |||
2005-11-16 | Avoid printing a NULL string. ok hshoexer | Chad Loder | |
2005-10-26 | don't send DPD messages before the exchange is finialized, otherwise | Markus Friedl | |
we have a race between DPD and exchange timeouts and both will release the SA and corrupt the SA list. ok hshoexer@, ho@ | |||
2005-07-05 | use correct function name in log message, tiny KNF | Hans-Joerg Hoexer | |
2005-06-25 | /* Fallthrough. */ -> /* FALLTHROUGH */ | Hans-Joerg Hoexer | |
now that's useable with lint | |||
2005-05-26 | Use TAILQ_FOREACH where possible, remove payload_last() | Hans-Joerg Hoexer | |
ok markus | |||
2005-05-26 | get rid of payload mapping | Hans-Joerg Hoexer | |
ok markus ho cloder | |||
2005-04-08 | Make deterministic randomness (only ever used for testing) a compile-time | Chad Loder | |
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer | |||
2005-04-08 | USE_DEBUG is bye bye | Theo de Raadt | |
2005-04-08 | missing includes | Hans-Joerg Hoexer | |
2005-04-08 | remove leftovers | Hans-Joerg Hoexer | |
2005-04-08 | always enable aggressive, dpd, and isakmp_cfg | Theo de Raadt | |
2005-04-08 | nat-traversal always | Theo de Raadt | |
2005-04-06 | knf, ok cloder | Theo de Raadt | |
2005-04-04 | spacing; ok cloder | Theo de Raadt | |
2005-03-10 | Avoid crash on finalization. We have been using this diff | Chad Loder | |
in production since mid-2003. OK hshoexer@, markus@, ho@ | |||
2005-03-05 | Silence a couple of annoying gcc3 warnings. hshoexer@ ok. | Hakan Olsson | |
2005-03-04 | fix leak when a phase 2 SA cannot create an exchange for the matching phase 1 | Markus Friedl | |
ok ho@, hshoexer@ | |||
2005-03-02 | correct function name in log message | Hans-Joerg Hoexer | |
2005-02-27 | where possible, use bzero instead of memset | Hans-Joerg Hoexer | |
ok cloder henning | |||
2005-01-31 | Avoid dereferencing a NULL pointer | Hans-Joerg Hoexer | |
ok msf | |||
2004-12-06 | RFC2409 mandates min and max nonce lengths. hshoexer@ ok. | Hakan Olsson | |
2004-09-17 | Missing #ifdefs. | Hakan Olsson | |
2004-08-23 | We need to set sa->initiator before checking if the newly created SA | Hakan Olsson | |
replaces an old one, or the id_i/id_r check will mismatch. Previous behaviour was mostly harmless, but wasted some resources (until normal SA expiration). hshoexer@ "haven't tried, but think it's ok" | |||
2004-08-10 | Better implementation of the Dead Peer Detection protocol, RFC 3706. | Hakan Olsson | |
hshoexer@ ok. | |||
2004-08-08 | spacing | Theo de Raadt | |
2004-07-09 | ansi | Theo de Raadt | |
2004-06-21 | Port floating (500->4500) for p1 and p2 exchanges. | Hakan Olsson | |
2004-06-20 | Make the payload array in struct message dynamic, since we need to handle | Hakan Olsson | |
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls. | |||
2004-06-20 | A start towards Dead Peer Detection (DPD) support, as specified in RFC 3706 | Hakan Olsson | |
2004-06-14 | KNF, style, 80c, etc. hshoexer@ ok | Hakan Olsson | |
2004-06-09 | Style nits. hshoexer@ ok | Hakan Olsson | |
2004-05-06 | KNF cleanup. hshoexer@ ok | Hakan Olsson | |
2004-05-03 | KNF. ok ho@ | Hans-Joerg Hoexer | |
2004-03-31 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |
2004-02-16 | check for isakmp_sa->transport != NULL; noticed by bluhm at genua.de ok ↵ | Markus Friedl | |
hshoexer@ | |||
2004-02-05 | small logging cleanup and improvement requested by markus | Hans-Joerg Hoexer | |
ok ho@ markus@ | |||
2004-01-16 | Added -v option. Enables logging of successful exchange completion. | Hans-Joerg Hoexer | |
ok ho@ | |||
2003-11-06 | Style nits. | Hakan Olsson | |
2003-11-06 | Require encrypted messages are soon as we have the keystate for it. | Hakan Olsson | |
Require DELETE payloads to be accompanied by HASHes, and add validation for HASH payloads without active exchanges. From Hans-Joerg Hoexer with various modifications and suggestions from me and markus@. Ok markus@. | |||
2003-10-14 | constant_lookup() to constant_name() cleanup. markus@ ok. | Hakan Olsson | |
2003-09-25 | Fix one case of set length before realloc. Fix another case of | Chad Loder | |
foo = realloc(foo...) and avoid possible memory leaks. Avoid leaving things pointing to freed memory on failure. | |||
2003-08-08 | Be more careful when using constant_lookup() in messages. Pointed out by | Hakan Olsson | |
Jean-Francois Dive, although I opted for a slightly different patch. | |||
2003-06-15 | ID copying should happen earlier in exchange_finalize so that we won't lose | Hakan Olsson | |
data during rekeying. From Jean-Francois Dive. | |||
2003-06-10 | boring cleanups | Theo de Raadt | |
2003-06-04 | Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos | Hakan Olsson | |
D. Keromytis and Niels Provos. | |||
2003-06-03 | Cleanup. Use 'sizeof variable' instead of magic constants. | Hakan Olsson | |
2003-05-15 | Cleanup. Do not store the private key in either the exchange or sa structs. | Hakan Olsson | |
2003-03-06 | Bad cut'n'paste msg plus style fixes. | Hakan Olsson | |