Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-12-14 | Allow the Address, Network, or Netmask values of the <IPsec-ID> to be | Ryan Thomas McBride | |
specified with an interface name (in which case the first address is used) or the keyword 'default' (in which case the address is selected based on the default route). eg: [roadwarrior-ip] ID-type= IPV4_ADDR Address= default ok ho@ hshoexer@ | |||
2004-09-17 | Missing #ifdefs. | Hakan Olsson | |
2004-08-10 | Better implementation of the Dead Peer Detection protocol, RFC 3706. | Hakan Olsson | |
hshoexer@ ok. | |||
2004-08-08 | spacing | Theo de Raadt | |
2004-06-23 | Add commandline switch -a / config tag "Acquire-Only" to tell isakmpd to not | Hans-Joerg Hoexer | |
touch flows. initial work by markus ok markus@ ho@ henning@ | |||
2004-06-21 | Implement NAT-T keepalive messages. | Hakan Olsson | |
2004-06-21 | style nit | Hakan Olsson | |
2004-06-20 | Make the payload array in struct message dynamic, since we need to handle | Hakan Olsson | |
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls. | |||
2004-06-20 | NAT-Traversal for isakmpd. Work in progress... | Hakan Olsson | |
hshoexer@ ok. | |||
2004-06-17 | Yet another bunch of memleask found and fixed by Patrick Latifi. Thanks! | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-16 | fix ipv6-address and ipv6-address-mask mixup. | Hans-Joerg Hoexer | |
Found by Patrick Latifi. Thanks! ok ho@ | |||
2004-06-14 | KNF, style, 80c, etc. hshoexer@ ok | Hakan Olsson | |
2004-06-10 | Mark authenticated messages explicitly. Better check for authentication before | Hans-Joerg Hoexer | |
deleteing SAs. This fix is needed to solve the problems reported by Thomas Walpuski, previous diff was not sufficient. Pointed out by Thomas. Thanks! ok ho@ niklas@, testing and spellcheck by todd@ msf@ | |||
2004-06-09 | Style nits. hshoexer@ ok | Hakan Olsson | |
2004-05-23 | More KNF. Mainly spaces and line-wraps, no binary change. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-19 | Permit symbolic protocol and service names, such as "Protocol= tcp", in the | Hakan Olsson | |
<IPsec-ID> sections. hshoexer@ ok | |||
2004-04-15 | partial move to KNF. More to come. This has happened because there | Theo de Raadt | |
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer | |||
2004-04-07 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |
2004-03-10 | Fix payload handling flaws found by cloder@. Based on initial patch by | Hans-Joerg Hoexer | |
cloder@. Testing by markus@ cloder@ hshoexer@. ok ho@ | |||
2004-02-27 | Remove dead code. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-01-03 | Be more careful with INITIAL-CONTACT and do not delete SPIs when getting | Hakan Olsson | |
an INVALID-SPI notification. Issues noted by Thomas Walpuski. markus@ ok. | |||
2003-12-15 | Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14 | Hans-Joerg Hoexer | |
to 18). ok ho@ | |||
2003-11-06 | Style nits. | Hakan Olsson | |
2003-11-06 | spis[] type tweak. From Hans-Joerg Hoexer. | Hakan Olsson | |
2003-10-14 | constant_lookup() to constant_name() cleanup. markus@ ok. | Hakan Olsson | |
2003-09-02 | A couple of nits. deraadt@ ok. | Hakan Olsson | |
2003-08-08 | Be more careful when using constant_lookup() in messages. Pointed out by | Hakan Olsson | |
Jean-Francois Dive, although I opted for a slightly different patch. | |||
2003-07-25 | add sha2 support; ok ho@ | Markus Friedl | |
2003-06-10 | Do not crash on unsupported IPSec ID types, as noted by Eric Boudrand. | Hakan Olsson | |
2003-06-04 | Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos | Hakan Olsson | |
D. Keromytis and Niels Provos. | |||
2003-06-03 | Cleanup. Use 'sizeof variable' instead of magic constants. | Hakan Olsson | |
2003-05-14 | I did not test this enough. Unbreak. | Hakan Olsson | |
2003-05-12 | AES -> AES_128_CBC | Hakan Olsson | |
2002-11-21 | -Wshadow nits. | Hakan Olsson | |
2002-09-11 | signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok. | Hakan Olsson | |
2002-09-08 | Fix -pedantic errors. | Hakan Olsson | |
2002-07-05 | gcc 3.1 nits. Pointed out by David Krause. | Hakan Olsson | |
2002-06-14 | Recognize the ECN_TUNNEL attribute. | Hakan Olsson | |
2002-06-09 | rm trailing whitespace | Todd T. Fries | |
2002-06-07 | This should solve PR#2729. | Hakan Olsson | |
2002-06-01 | size_t must be cast to (unsigned long) and printed using %lu | Theo de Raadt | |
2002-02-21 | Set the source port correctly, shifflett@nps.navy.mil | Angelos D. Keromytis | |
2002-01-27 | Add the (former) AES candidate ESP ciphers for IKE, as of | Hakan Olsson | |
http://csrc.nist.gov/ipsec/papers/aes-draft.00.txt In particular, recognize a Twofish proposal with cipher number 253, as used by the SSH Sentinel. | |||
2002-01-23 | less sprintf/str[n]cpy/strcat | Hakan Olsson | |
2001-12-16 | diagnostic incorrect; vlada@openbsd.cz | Theo de Raadt | |
2001-10-26 | Change to use sysdep_sa_len() function. | Hakan Olsson | |
2001-10-26 | Just rename sockaddr_data/len functions to sockaddr_addrdata/addrlen. | Hakan Olsson | |
2001-08-25 | Use x509_DN_string API. Style fixes. | Niklas Hallqvist | |
2001-08-24 | typo in debug msg | Hakan Olsson | |
2001-08-23 | Correct ipsec_id_string buffer and length handling. | Niklas Hallqvist | |