summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/isakmp_cfg.c
AgeCommit message (Collapse)Author
2004-08-08spacingTheo de Raadt
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.
2004-06-15also use MSG_AUTHENTICATED flag.Hans-Joerg Hoexer
ok ho@
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-03-11Fix a memleak.Hans-Joerg Hoexer
ok ho@
2003-12-04TyposMiod Vallat
2003-06-10boring cleanupsTheo de Raadt
2003-06-03Remove clauses 3 and 4. With approval from Niklas Hallqvist andHakan Olsson
Niels Provos.
2003-01-09Proper id_string for SET/ACK responder, plus attr payload fixes.Hakan Olsson
2002-08-23Small cleanup.Hakan Olsson
2002-07-16fix $OpenBSD TagMarkus Friedl
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-09Mark attr payload as handled. Also make sure the correct payloadHakan Olsson
length is returned.
2002-06-09Bad me. Make sure it compiles before commit.Hakan Olsson
2002-06-09CFG_REQUESTHakan Olsson
2002-06-09Style.Hakan Olsson
2002-06-09Tighten the code to work for both SET/ACK and REQ/REPLY modes.Hakan Olsson
2002-06-08Factor out hash operations, some other cleanup.Hakan Olsson
2002-06-08a bit more for the responder casesHakan Olsson
2002-06-07Avoid some gcc3 warnings. From David Krause <openbsd@davidkrause.com>Hakan Olsson
2002-06-07Also allocate space for the attribute header.Hakan Olsson
2002-06-07Start for support of IKECFG in SET/ACK mode. Server side only so far.Hakan Olsson
2002-06-06Answer requests for netmasks, subnets, and dhcp-servers as well. AddHakan Olsson
debug and warning messages for missing/bad values. Rewrite it a bit. niklas@ ok.
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2001-10-26Just rename sockaddr_data/len functions to sockaddr_addrdata/addrlen.Hakan Olsson
2001-08-27un-borkTheo de Raadt
2001-08-23Use ipsec_id_string as the section name for IKE mode config.Niklas Hallqvist
2001-07-25CFG mode changes: send attributes of size 0 if attribute is not availableMarkus Friedl
fix several if statements, ok ho@
2001-07-04Better IPv6/IPv4 integrationNiklas Hallqvist
2001-07-04IPv6Niklas Hallqvist
2001-07-01ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation.Niklas Hallqvist
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw.