summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/ike_phase_1.c
AgeCommit message (Expand)Author
2010-06-29Replace the hand-crafted Diffie-Hellman implementation in isakmpd withReyk Floeter
2008-02-06Fix possible memory leaks when sending phase 1 IDs.Moritz Jodeit
2007-08-05Allow key exchange with RSA signature authentication to work withTom Cosgrove
2007-05-07It was possible for phase 1 negotiation to fail due to lifetime durationChad Loder
2007-04-22Use conf_free_list() after calling conf_get_list().Moritz Jodeit
2007-04-16There's no point in checking ptr for NULL before doing free(ptr)Moritz Jodeit
2006-07-02Let isakmpd send out a vendor ID announcing isamkpds release version.Hans-Joerg Hoexer
2005-07-05fix commentHans-Joerg Hoexer
2005-06-25Use correct local ID in phase 1 when using IPV[46]_ADDR.Hans-Joerg Hoexer
2005-05-26Use TAILQ_FOREACH where possible, remove payload_last()Hans-Joerg Hoexer
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
2005-04-08always enable aggressive, dpd, and isakmp_cfgTheo de Raadt
2005-04-08nat-traversal alwaysTheo de Raadt
2005-04-04spacing; ok cloderTheo de Raadt
2005-01-29some knf and space killing, no binary change.Hans-Joerg Hoexer
2004-12-14Allow the Address, Network, or Netmask values of the <IPsec-ID> to beRyan Thomas McBride
2004-08-08spacingTheo de Raadt
2004-07-29Repair NAT-T using Aggressive mode, NAT-D checks were in the wrong place.Hakan Olsson
2004-07-05%lu and cast to unsigned long to print a size_t; ok hoPeter Valchev
2004-06-23Support IPV{4,6}_ADDR_SUBNET IDs in Phase 1, just like the man pageHakan Olsson
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
2004-06-20NAT-Traversal for isakmpd. Work in progress...Hakan Olsson
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-10Mark authenticated messages explicitly. Better check for authentication beforeHans-Joerg Hoexer
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-06-06Style (KNF, 80c). No binary change.Hakan Olsson
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
2004-04-07-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-02-27(C)-2004Hakan Olsson
2004-02-27Follow RFC 2408 more closely regarding how to better check the proposalHakan Olsson
2003-12-04TyposMiod Vallat
2003-10-14constant_lookup() to constant_name() cleanup. markus@ ok.Hakan Olsson
2003-10-04Avoid crash on invalid config file (missing value for LIFE_DURATION).Chad Loder
2003-08-08Be more careful when using constant_lookup() in messages. Pointed out byHakan Olsson
2003-06-10boring cleanupsTheo de Raadt
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-07-04styleHakan Olsson
2002-06-06Style, and a few additional format/type mods.Hakan Olsson
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2001-10-26Just rename sockaddr_data/len functions to sockaddr_addrdata/addrlen.Hakan Olsson
2001-07-01More Style police, but also sane checking of addressNiklas Hallqvist
2001-07-01Set size correctly for IPv6 Phase 1 IDs.Angelos D. Keromytis
2001-06-29Change get_src/get_dst API as we get the length with sa_len.Hakan Olsson
2001-06-29Initial IPv6 support. (niklas@ ok)Hakan Olsson
2001-06-05Print the correct expected Remote ID valueAngelos D. Keromytis
2001-06-05Don't use log_error() in vain.Angelos D. Keromytis
2001-06-05Enforce Remote-ID specified in Phase 1 peer section (whether manuallyAngelos D. Keromytis
2001-03-13Add logging classes for Negotiation and Policy, and change a number ofHakan Olsson