summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/isakmpd.8
AgeCommit message (Collapse)Author
2006-10-05Reword sentence to fix grammar nit.Tom Cosgrove
ok jmc@
2006-09-09point people towards ipsec.conf.5; after some discussion w/ reykJason McIntyre
ok hshoexer reyk
2006-09-01use shell-independent examples;Jason McIntyre
2006-08-31document an issue with subjectAltName found by reyk;Jason McIntyre
ok hshoexer ho reyk
2006-08-31remove a confusing sentence; ok hshoexer hoJason McIntyre
2006-08-30rewording; from reyk cloder hshoexerJason McIntyre
ok ho
2006-08-30Make SA deletion on shutdown the default again. Use -S for failoverHans-Joerg Hoexer
situations where you do not want this. Discussed and agreed on with ho, mcbride, markus, cloder,... We will have to teach sasyncd to deal with this. Testing by msf and hshoexer with help from mtu ok markus cloder
2006-06-29Document that pcap files can only be writen to the /var/run directory.Hans-Joerg Hoexer
2006-06-10Document -S and the "Delete-SAs" tag. Those will enable SA deletionHans-Joerg Hoexer
on shutdown.
2006-05-26vpn.8 removal;Jason McIntyre
2006-05-26let us not talk about ipsecadm and vpn anymore; ok reykTheo de Raadt
2005-09-23Document new UI commandsHans-Joerg Hoexer
ok and help jmc@
2005-08-23note that RSA_SIG should be part of the "Transforms" tag when settingJason McIntyre
up key- and cert-based authentication; problem found by andrew fresh; help/ok hshoexer@
2005-06-04Clarify that for -i/-R only paths beginning with /var/run are valid.Hans-Joerg Hoexer
2005-06-02expand the section on pki:Jason McIntyre
- list different methods available - document key-based method - move x509-based into its own section - add keynote stub section ok hshoexer@
2005-05-18remove certpatch(8) stuff;Jason McIntyre
ok hshoexer@
2005-05-14more logical section order;Jason McIntyre
2005-05-14- openssl req can create self-signed certs in one stepJason McIntyre
- no need to encourage people to generate system keys: rc(8) already does it ok hshoexer@
2005-05-06sync the CERTIP and CERTFQDN sections;Jason McIntyre
2005-05-05document /etc/isakmpd/pubkeys a little better;Jason McIntyre
2005-05-05cleanup FIFO section;Jason McIntyre
2005-05-05first stab at improving PKI section;Jason McIntyre
2005-05-05improve FILES;Jason McIntyre
2005-04-10- sort synopsis + options listJason McIntyre
- sync usage() - tidy up lists and displays - misc tweaks
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-05ipsecadm lives in section 8, not 4;Jason McIntyre
missing word;
2005-04-05Add -T flag to isakmpd to disable NAT-T support from the command line.Chad Loder
This lets binat setups work again without having to recompile isakmpd. OK ho, hshoexer.
2005-02-25Zap -P option. It has never done anything. While there tweak descripton ofHans-Joerg Hoexer
-N. zap -P ok ho@
2005-02-24Add -N switch to select port for udpencap. Thus it's possible to run multipleHans-Joerg Hoexer
isakmpds on different ports specified with -p and -N. ok ho@
2004-07-08typo, and line adjustment;Jason McIntyre
2004-07-07document -a/-K and "Acquire-Only"/"Use-Keynote".Hans-Joerg Hoexer
ok markus@ henning@ ho@ english polish and mdoc help and ok jmc@
2004-05-13Extensions to the FIFO interface:Hakan Olsson
"C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok.
2004-04-15spacesTheo de Raadt
2004-03-24Add some notes about privsep to manpage.Hans-Joerg Hoexer
ok ho@ jmc@ deraadt@
2004-01-23`Ns' implies `No', so `Ns No' -> `Ns'; (even simpler in adduser(8))Jason McIntyre
discussed with todd@
2004-01-16Added -v option. Enables logging of successful exchange completion.Hans-Joerg Hoexer
ok ho@
2003-11-20use .Dv for AF_INET and AF_INET6 (kills ugly line break);Jason McIntyre
spotted by Alexey E. Suslikov; also kill some .Pp's before displays/lists for better PostScript output;
2003-10-25receiveing -> receiving; from Jared Yanovich;Jason McIntyre
2003-10-13Add a UI FIFO debug class. ok markus@ plus I think henning@Hakan Olsson
2003-08-20certpatch(8) can be used to create FQDN X509v3 extensions too.Hakan Olsson
From Fridtjof Busse, via henning@. Thanks.
2003-08-09new sentence, new line + small cleanup;Jason McIntyre
ok ho@
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-06-03- section reorderJason McIntyre
- some mdoc fixes
2003-05-10typos;Jason McIntyre
2003-04-27Describe the 'C set' FIFO command better. (PR#3148, also)Hakan Olsson
2003-02-22Clarify some language, grammar. ho@ okayed this many moons ago,Kjell Wooding
and I forgot all about it.
2003-02-05typos; isakmpd(8) ok niklas@, mailwrapper(8) help kjell@Jason McIntyre
2002-12-03Add -4/-6 cmdline options to select what address family (IPv4,v6) to use.Hakan Olsson
niklas@ ok.
2002-11-27Update document date.Hakan Olsson
2002-11-09more SEE ALSO fixes.Federico G. Schwindt
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-01 15:20:26 +0000