summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/exchange.c
AgeCommit message (Collapse)Author
2006-06-02Big spelling cleanup, no binary change. From david@Hans-Joerg Hoexer
2006-05-31Make sure, that phase 1 SAs of active connections stay alive. Fixes a DPDHans-Joerg Hoexer
breakage noticed and reported by Mitja Muzenic. ok markus@ ho@, testing by Mitja and cloder@, discussed with Nathanael.
2005-11-16Avoid printing a NULL string. ok hshoexerChad Loder
2005-10-26don't send DPD messages before the exchange is finialized, otherwiseMarkus Friedl
we have a race between DPD and exchange timeouts and both will release the SA and corrupt the SA list. ok hshoexer@, ho@
2005-07-05use correct function name in log message, tiny KNFHans-Joerg Hoexer
2005-06-25/* Fallthrough. */ -> /* FALLTHROUGH */Hans-Joerg Hoexer
now that's useable with lint
2005-05-26Use TAILQ_FOREACH where possible, remove payload_last()Hans-Joerg Hoexer
ok markus
2005-05-26get rid of payload mappingHans-Joerg Hoexer
ok markus ho cloder
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-08USE_DEBUG is bye byeTheo de Raadt
2005-04-08missing includesHans-Joerg Hoexer
2005-04-08remove leftoversHans-Joerg Hoexer
2005-04-08always enable aggressive, dpd, and isakmp_cfgTheo de Raadt
2005-04-08nat-traversal alwaysTheo de Raadt
2005-04-06knf, ok cloderTheo de Raadt
2005-04-04spacing; ok cloderTheo de Raadt
2005-03-10Avoid crash on finalization. We have been using this diffChad Loder
in production since mid-2003. OK hshoexer@, markus@, ho@
2005-03-05Silence a couple of annoying gcc3 warnings. hshoexer@ ok.Hakan Olsson
2005-03-04fix leak when a phase 2 SA cannot create an exchange for the matching phase 1Markus Friedl
ok ho@, hshoexer@
2005-03-02correct function name in log messageHans-Joerg Hoexer
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2005-01-31Avoid dereferencing a NULL pointerHans-Joerg Hoexer
ok msf
2004-12-06RFC2409 mandates min and max nonce lengths. hshoexer@ ok.Hakan Olsson
2004-09-17Missing #ifdefs.Hakan Olsson
2004-08-23We need to set sa->initiator before checking if the newly created SAHakan Olsson
replaces an old one, or the id_i/id_r check will mismatch. Previous behaviour was mostly harmless, but wasted some resources (until normal SA expiration). hshoexer@ "haven't tried, but think it's ok"
2004-08-10Better implementation of the Dead Peer Detection protocol, RFC 3706.Hakan Olsson
hshoexer@ ok.
2004-08-08spacingTheo de Raadt
2004-07-09ansiTheo de Raadt
2004-06-21Port floating (500->4500) for p1 and p2 exchanges.Hakan Olsson
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.
2004-06-20A start towards Dead Peer Detection (DPD) support, as specified in RFC 3706Hakan Olsson
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-05-06KNF cleanup. hshoexer@ okHakan Olsson
2004-05-03KNF. ok ho@Hans-Joerg Hoexer
2004-03-31-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-02-16check for isakmp_sa->transport != NULL; noticed by bluhm at genua.de ok ↵Markus Friedl
hshoexer@
2004-02-05small logging cleanup and improvement requested by markusHans-Joerg Hoexer
ok ho@ markus@
2004-01-16Added -v option. Enables logging of successful exchange completion.Hans-Joerg Hoexer
ok ho@
2003-11-06Style nits.Hakan Olsson
2003-11-06Require encrypted messages are soon as we have the keystate for it.Hakan Olsson
Require DELETE payloads to be accompanied by HASHes, and add validation for HASH payloads without active exchanges. From Hans-Joerg Hoexer with various modifications and suggestions from me and markus@. Ok markus@.
2003-10-14constant_lookup() to constant_name() cleanup. markus@ ok.Hakan Olsson
2003-09-25Fix one case of set length before realloc. Fix another case ofChad Loder
foo = realloc(foo...) and avoid possible memory leaks. Avoid leaving things pointing to freed memory on failure.
2003-08-08Be more careful when using constant_lookup() in messages. Pointed out byHakan Olsson
Jean-Francois Dive, although I opted for a slightly different patch.
2003-06-15ID copying should happen earlier in exchange_finalize so that we won't loseHakan Olsson
data during rekeying. From Jean-Francois Dive.
2003-06-10boring cleanupsTheo de Raadt
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2003-05-15Cleanup. Do not store the private key in either the exchange or sa structs.Hakan Olsson
2003-03-06Bad cut'n'paste msg plus style fixes.Hakan Olsson