Age | Commit message (Collapse) | Author |
|
the smaller implementation from iked that is using libcrypto instead.
This allows to remove a lot of code (which is always good), get rid of
some custom crypto code by using libcrypto, theoretically adds
support for many new MODP and EC2N/ECP modes (but it is not configurable
yet), and allows to share the dh.c/dh.h code in different codebases
(it is identical in isakmpd and iked, but could also be used elsewhere).
ok deraadt@
|
|
option. Reduces chances of somehow setting regrand when it's not supposed
to be set. Remove "-r" option from man page. Also xref certpatch(8) while
we are in there. And remove some include sysdep.h where it is no longer
needed.
OK hshoexer
|
|
|
|
ok ho@
|
|
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our standard
auditing process. ok ho hshoexer
|
|
Niels Provos.
|
|
ike_main_mode.c: Merge with EOM 1.77
ipsec.h: Merge with EOM 1.35
author: niklas
Send out INITIAL-CONTACT notifications
|
|
Let's get aggressive\!
|
|
Memory alloc. error reporting. Mem leak plugging.
|
|
1999 copyrights
Better error reporting in lifetime policy checking
too aggressively removing gotos
|
|
Correct lifetime attribute checking against policy
|
|
| revision 1.70
| date: 1999/02/25 11:39:03; author: niklas; state: Exp; lines: +3 -1
| include sysdep.h everywhere
| ----------------------------
| revision 1.69
| date: 1999/02/25 11:09:35; author: niklas; state: Exp; lines: +5 -5
| Make conf_get_num take a default value to give back when tag does not exist
| ----------------------------
|
|
|
|
|
|
|
|
|
|
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by
Ericsson Radio Systems. It is not yet complete or usable in a real scenario
but the missing pieces will soon be there. The early commit is for people
who wants early access and who are not afraid of looking at source.
isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so
far, so it is not that incomplete. It is really mostly configuration that
is lacking.
|