| Age | Commit message (Collapse) | Author |
|---|
|
author: niklas
Fix no ID in QM, when acting as responder, bug
|
|
ipsec.h: Merge with EOM 1.37
author: niklas
Add a function giving the size of a certain ID-payload
|
|
doi.h: Merge with EOM 1.27
ike_auth.c: Merge with EOM 1.30
ike_quick_mode.c: Merge with EOM 1.85
ipsec.c: Merge with EOM 1.107
ipsec.h: Merge with EOM 1.36
isakmp_doi.c: Merge with EOM 1.39
author: niklas
Factor out keyed hashing of all payloads with SKEYID_a, and make DOI hooks
for informational exchanges to add such hashing. Use it from QM and the IKE
authentication module too. Remove some bogus XXX comments. Add error
reporting
|
|
ike_main_mode.c: Merge with EOM 1.77
ipsec.h: Merge with EOM 1.35
author: niklas
Send out INITIAL-CONTACT notifications
|
|
./gmp_util.c: Merge with EOM 1.3
./asn_useful.c: Merge with EOM 1.11
./attribute.c: Merge with EOM 1.9
./constants.c: Merge with EOM 1.7
./doi.h: Merge with EOM 1.25
./doi.c: Merge with EOM 1.4
./field.c: Merge with EOM 1.9
./init.c: Merge with EOM 1.13
./isakmp_doi.c: Merge with EOM 1.35
./prf.c: Merge with EOM 1.6
./util.c: Merge with EOM 1.14
./app.h: Merge with EOM 1.4
./conf.h: Merge with EOM 1.8
./ipsec.h: Merge with EOM 1.34
./ipsec_doi.h: Merge with EOM 1.10
./pkcs.h: Merge with EOM 1.8
./sysdep.h: Merge with EOM 1.15
1999 copyrights
|
|
ipsec.h: Merge with EOM 1.33
pf_encap.c: Merge with EOM 1.52
pf_key_v2.c: Merge with EOM 1.3
Fix case of missing client ID payloads, a case the standards allow. Thanks
to Michael Paddon (mwp@aba.net.au) for the diffs I based my fix upon. His
diff also made me realize I stored the address information in host order in
internal structures where I had planned to use network order. Fix this,
and remove the XXXes I had due to this elsewhere. Add commentary.
|
|
| revision 1.32
| date: 1999/02/25 09:30:26; author: niklas; state: Exp; lines: +4 -1
| Replay protection window configurable
| ----------------------------
| revision 1.31
| date: 1999/02/14 00:21:12; author: niklas; state: Exp; lines: +2 -1
| Find relevant SAs out of IPsec expiration info. Do not automatically rekey.
| ----------------------------
| revision 1.30
| date: 1999/01/31 01:17:01; author: niklas; state: Exp; lines: +4 -1
| splitup ipsec_build_id into more useful API
| ----------------------------
|
|
|
|
|
|
|
|
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by
Ericsson Radio Systems. It is not yet complete or usable in a real scenario
but the missing pieces will soon be there. The early commit is for people
who wants early access and who are not afraid of looking at source.
isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so
far, so it is not that incomplete. It is really mostly configuration that
is lacking.
|
