summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/ike_auth.c
AgeCommit message (Expand)Author
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
2003-06-03Remove clauses 3 and 4. With approval from Niklas Hallqvist andHakan Olsson
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2003-05-18More isakmpd privsep work. X509 private keys are now kept in the privilegedHakan Olsson
2003-05-15Correct a two year old typo, which might actually makeHakan Olsson
2003-05-15Cleanup. Do not store the private key in either the exchange or sa structs.Hakan Olsson
2003-05-15Work around some OpenSSL BIO "features" to read the key correctly.Hakan Olsson
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
2003-05-14Default public key directory definition sanity.Hakan Olsson
2003-03-13Might as well do blinding here too.Hakan Olsson
2003-01-22Typo.Hakan Olsson
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-06-10The dlopen() stuff goes away.Hakan Olsson
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-05-28off_t to size_t change for printf format and malloc. Pointed out by <greg@nes...Hakan Olsson
2002-01-23strncat->strlcat, sprintf->snprintfHakan Olsson
2001-08-23Correct ipsec_id_string buffer and length handling.Niklas Hallqvist
2001-08-22use ipsec_id_string() when generating rawkey file names.Hakan Olsson
2001-08-22If we fail to get a key from DNSSEC, RAWKEY can still succeed.Hakan Olsson
2001-08-16openssl black magic.Hakan Olsson
2001-08-16Off-by-one error in [u]fqdn cases, plus better debug messages whenHakan Olsson
2001-08-16ISAKMP ID type offset was wrong.Hakan Olsson
2001-08-15Some more style...Hakan Olsson
2001-08-15Support trusted public (RSA) keys as files too. niklas@ ok.Hakan Olsson
2001-07-01StyleNiklas Hallqvist
2001-06-29Remove extra ':' from LOG_DBG_BUF()Angelos D. Keromytis
2001-06-29Initial IPv6 support. (niklas@ ok)Hakan Olsson
2001-06-28Add some more debugging information wrt PRF generation.Angelos D. Keromytis
2001-06-11make #ifdef around x509_generate_kn() consistent.Jun-ichiro itojun Hagino
2001-06-07Actually, don't re-insert X509 certs which we acquired from our storeAngelos D. Keromytis
2001-06-07Add an X509 cert in the policy session even if it was found in ourAngelos D. Keromytis
2001-06-06NUL-terminate passphrase.Angelos D. Keromytis
2001-06-05Don't use log_error() if it's an internal error.Angelos D. Keromytis
2001-06-05Style issues and commentaryNiklas Hallqvist
2001-06-05Add back check for found/not found public key to use for verificationAngelos D. Keromytis
2001-05-31When trying to find the right certificate/key to use, first check inAngelos D. Keromytis
2001-05-24Match the IDs without checking the ASN1 length field, similar to howAngelos D. Keromytis
2001-04-09Style police a'la niklas@.Hakan Olsson
2001-03-27Plug one memory leak. Found with boehm-gc.Hakan Olsson
2001-01-27Call OpenSSL functions with LC (). Various style nits.Hakan Olsson
2001-01-27(c) 2001Niklas Hallqvist
2001-01-27include dnssec.h only if USE_DNSSEC; niklas okJun-ichiro itojun Hagino
2001-01-26Preliminary but working code to permit IKE authentication using DNSSECHakan Olsson
2001-01-26include keynote.h only if USE_KEYNOTE is defined; ok niklas@Markus Friedl
2001-01-26Pedantic style policeNiklas Hallqvist
2000-12-19gmp is gone, make it build again; cvs retardMichael Shalayeff
2000-11-23Merge with EOM 1.59Niklas Hallqvist
2000-10-13util.h: Merge with EOM 1.8Niklas Hallqvist
2000-10-07Merge with EOM 1.56Niklas Hallqvist