summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/ipsec.c
AgeCommit message (Collapse)Author
2004-01-03Be more careful with INITIAL-CONTACT and do not delete SPIs when gettingHakan Olsson
an INVALID-SPI notification. Issues noted by Thomas Walpuski. markus@ ok.
2003-12-15Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14Hans-Joerg Hoexer
to 18). ok ho@
2003-11-06Style nits.Hakan Olsson
2003-11-06spis[] type tweak. From Hans-Joerg Hoexer.Hakan Olsson
2003-10-14constant_lookup() to constant_name() cleanup. markus@ ok.Hakan Olsson
2003-09-02A couple of nits. deraadt@ ok.Hakan Olsson
2003-08-08Be more careful when using constant_lookup() in messages. Pointed out byHakan Olsson
Jean-Francois Dive, although I opted for a slightly different patch.
2003-07-25add sha2 support; ok ho@Markus Friedl
2003-06-10Do not crash on unsupported IPSec ID types, as noted by Eric Boudrand.Hakan Olsson
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2003-05-14I did not test this enough. Unbreak.Hakan Olsson
2003-05-12AES -> AES_128_CBCHakan Olsson
2002-11-21-Wshadow nits.Hakan Olsson
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-09-08Fix -pedantic errors.Hakan Olsson
2002-07-05gcc 3.1 nits. Pointed out by David Krause.Hakan Olsson
2002-06-14Recognize the ECN_TUNNEL attribute.Hakan Olsson
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-07This should solve PR#2729.Hakan Olsson
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-02-21Set the source port correctly, shifflett@nps.navy.milAngelos D. Keromytis
2002-01-27Add the (former) AES candidate ESP ciphers for IKE, as ofHakan Olsson
http://csrc.nist.gov/ipsec/papers/aes-draft.00.txt In particular, recognize a Twofish proposal with cipher number 253, as used by the SSH Sentinel.
2002-01-23less sprintf/str[n]cpy/strcatHakan Olsson
2001-12-16diagnostic incorrect; vlada@openbsd.czTheo de Raadt
2001-10-26Change to use sysdep_sa_len() function.Hakan Olsson
2001-10-26Just rename sockaddr_data/len functions to sockaddr_addrdata/addrlen.Hakan Olsson
2001-08-25Use x509_DN_string API. Style fixes.Niklas Hallqvist
2001-08-24typo in debug msgHakan Olsson
2001-08-23Correct ipsec_id_string buffer and length handling.Niklas Hallqvist
2001-08-22Add ipsec_id_string, a function for converting IDs to on epossibleNiklas Hallqvist
string form, to be used for IKE mode config and raw key selection by ID. Not yet used though.
2001-07-06Style.Hakan Olsson
2001-07-04Merge entries.Angelos D. Keromytis
2001-07-01ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation.Niklas Hallqvist
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw.
2001-07-01Teach ipsec_decode_ids about IPv6. More error checking, some better log msgs.Hakan Olsson
2001-06-29Get rid of redundant lengths in get_spi API.Hakan Olsson
2001-06-29Change get_src/get_dst API as we get the length with sa_len.Hakan Olsson
2001-06-29Since we have a sockaddr struct, use sa_len directly.Hakan Olsson
2001-06-29Initial IPv6 support. (niklas@ ok)Hakan Olsson
2001-06-27Consistently use "IPsec" capitalization (jsyn@nthought.com)Angelos D. Keromytis
2001-05-05Pass the Phase 1 SA to the set_spi routine, so the IDs (and eventuallyAngelos D. Keromytis
any credentials) can be associated with the Phase 2 SA.
2001-04-24Correct SA refcounting. Fixes a bug where isakmpd could die when a peer wasNiklas Hallqvist
discovered to have rebooted, and old now invalid SAs had to be garbage- collected.
2001-04-15Style.Hakan Olsson
2001-04-09More style fixes...Hakan Olsson
2001-03-29We need ipsec_decode_ids regardless of DEBUG feature now.Hakan Olsson
2001-03-07Add KEY_ID support (mostly from roland@digitalvampire.org)Angelos D. Keromytis
2001-02-24For the GETSPI PFKEY message, use the sequence number from the ACQUIREAngelos D. Keromytis
message.
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26Pedantic style policeNiklas Hallqvist
2001-01-14Handling of Phase 1 DELETE and Phase 2 INVALID_SPI messagesAngelos D. Keromytis
(newsham@lava.net)