Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-01-03 | Be more careful with INITIAL-CONTACT and do not delete SPIs when getting | Hakan Olsson | |
an INVALID-SPI notification. Issues noted by Thomas Walpuski. markus@ ok. | |||
2003-12-15 | Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14 | Hans-Joerg Hoexer | |
to 18). ok ho@ | |||
2003-11-06 | Style nits. | Hakan Olsson | |
2003-11-06 | spis[] type tweak. From Hans-Joerg Hoexer. | Hakan Olsson | |
2003-10-14 | constant_lookup() to constant_name() cleanup. markus@ ok. | Hakan Olsson | |
2003-09-02 | A couple of nits. deraadt@ ok. | Hakan Olsson | |
2003-08-08 | Be more careful when using constant_lookup() in messages. Pointed out by | Hakan Olsson | |
Jean-Francois Dive, although I opted for a slightly different patch. | |||
2003-07-25 | add sha2 support; ok ho@ | Markus Friedl | |
2003-06-10 | Do not crash on unsupported IPSec ID types, as noted by Eric Boudrand. | Hakan Olsson | |
2003-06-04 | Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos | Hakan Olsson | |
D. Keromytis and Niels Provos. | |||
2003-06-03 | Cleanup. Use 'sizeof variable' instead of magic constants. | Hakan Olsson | |
2003-05-14 | I did not test this enough. Unbreak. | Hakan Olsson | |
2003-05-12 | AES -> AES_128_CBC | Hakan Olsson | |
2002-11-21 | -Wshadow nits. | Hakan Olsson | |
2002-09-11 | signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok. | Hakan Olsson | |
2002-09-08 | Fix -pedantic errors. | Hakan Olsson | |
2002-07-05 | gcc 3.1 nits. Pointed out by David Krause. | Hakan Olsson | |
2002-06-14 | Recognize the ECN_TUNNEL attribute. | Hakan Olsson | |
2002-06-09 | rm trailing whitespace | Todd T. Fries | |
2002-06-07 | This should solve PR#2729. | Hakan Olsson | |
2002-06-01 | size_t must be cast to (unsigned long) and printed using %lu | Theo de Raadt | |
2002-02-21 | Set the source port correctly, shifflett@nps.navy.mil | Angelos D. Keromytis | |
2002-01-27 | Add the (former) AES candidate ESP ciphers for IKE, as of | Hakan Olsson | |
http://csrc.nist.gov/ipsec/papers/aes-draft.00.txt In particular, recognize a Twofish proposal with cipher number 253, as used by the SSH Sentinel. | |||
2002-01-23 | less sprintf/str[n]cpy/strcat | Hakan Olsson | |
2001-12-16 | diagnostic incorrect; vlada@openbsd.cz | Theo de Raadt | |
2001-10-26 | Change to use sysdep_sa_len() function. | Hakan Olsson | |
2001-10-26 | Just rename sockaddr_data/len functions to sockaddr_addrdata/addrlen. | Hakan Olsson | |
2001-08-25 | Use x509_DN_string API. Style fixes. | Niklas Hallqvist | |
2001-08-24 | typo in debug msg | Hakan Olsson | |
2001-08-23 | Correct ipsec_id_string buffer and length handling. | Niklas Hallqvist | |
2001-08-22 | Add ipsec_id_string, a function for converting IDs to on epossible | Niklas Hallqvist | |
string form, to be used for IKE mode config and raw key selection by ID. Not yet used though. | |||
2001-07-06 | Style. | Hakan Olsson | |
2001-07-04 | Merge entries. | Angelos D. Keromytis | |
2001-07-01 | ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation. | Niklas Hallqvist | |
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw. | |||
2001-07-01 | Teach ipsec_decode_ids about IPv6. More error checking, some better log msgs. | Hakan Olsson | |
2001-06-29 | Get rid of redundant lengths in get_spi API. | Hakan Olsson | |
2001-06-29 | Change get_src/get_dst API as we get the length with sa_len. | Hakan Olsson | |
2001-06-29 | Since we have a sockaddr struct, use sa_len directly. | Hakan Olsson | |
2001-06-29 | Initial IPv6 support. (niklas@ ok) | Hakan Olsson | |
2001-06-27 | Consistently use "IPsec" capitalization (jsyn@nthought.com) | Angelos D. Keromytis | |
2001-05-05 | Pass the Phase 1 SA to the set_spi routine, so the IDs (and eventually | Angelos D. Keromytis | |
any credentials) can be associated with the Phase 2 SA. | |||
2001-04-24 | Correct SA refcounting. Fixes a bug where isakmpd could die when a peer was | Niklas Hallqvist | |
discovered to have rebooted, and old now invalid SAs had to be garbage- collected. | |||
2001-04-15 | Style. | Hakan Olsson | |
2001-04-09 | More style fixes... | Hakan Olsson | |
2001-03-29 | We need ipsec_decode_ids regardless of DEBUG feature now. | Hakan Olsson | |
2001-03-07 | Add KEY_ID support (mostly from roland@digitalvampire.org) | Angelos D. Keromytis | |
2001-02-24 | For the GETSPI PFKEY message, use the sequence number from the ACQUIRE | Angelos D. Keromytis | |
message. | |||
2001-01-27 | (c) 2001 | Niklas Hallqvist | |
2001-01-26 | Pedantic style police | Niklas Hallqvist | |
2001-01-14 | Handling of Phase 1 DELETE and Phase 2 INVALID_SPI messages | Angelos D. Keromytis | |
(newsham@lava.net) |