summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/isakmpd.c
AgeCommit message (Collapse)Author
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2005-02-25forgot to remove -P from getopt().Hans-Joerg Hoexer
2005-02-25Zap -P option. It has never done anything. While there tweak descripton ofHans-Joerg Hoexer
-N. zap -P ok ho@
2005-02-24Add -N switch to select port for udpencap. Thus it's possible to run multipleHans-Joerg Hoexer
isakmpds on different ports specified with -p and -N. ok ho@
2005-02-16On shutdown also send delete messages for isakmp SAs.Hans-Joerg Hoexer
ok ho
2004-09-17avoid signal race.Hans-Joerg Hoexer
ok ho@ otto@
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-23Add commandline switch -a / config tag "Acquire-Only" to tell isakmpd to notHans-Joerg Hoexer
touch flows. initial work by markus ok markus@ ho@ henning@
2004-06-20To make debugging the unprivileged child process easier, make 'isakmpd -dd'Hakan Olsson
pause just after privsep; print the PIDs and wait for SIGCONT. hshoexer@ ok
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-19Permit symbolic protocol and service names, such as "Protocol= tcp", in theHakan Olsson
<IPsec-ID> sections. hshoexer@ ok
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-04-08Set timezone before privsep, child uses now correct timezone.Hans-Joerg Hoexer
Noticed by david@ ok ho@ david@
2004-03-31Don't assume closefrom(2) exists everywhere. hshoexer@, markus@ ok.Hakan Olsson
2004-03-19Add missing bits to make already present privsep code work. Enable privsep.Hans-Joerg Hoexer
ok ho@ deraadt@ markus@
2004-02-19small cleanup of log messages.Hans-Joerg Hoexer
ok ho@
2004-02-19With -d, SIGINT should do a clean shutdown.Hakan Olsson
Without -d, logs should be sent to syslog, level LOG_INFO.
2004-02-19Cleanup.Hakan Olsson
2004-01-16Added -v option. Enables logging of successful exchange completion.Hans-Joerg Hoexer
ok ho@
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-05-18More isakmpd privsep work. X509 private keys are now kept in the privilegedHakan Olsson
process only. Various cleanup and bugfixes. markus@ ok
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
There are some kinks left, so keep it default disabled for now. markus@ says ok to commit.
2003-05-14Fix a typo (in unused code).Hakan Olsson
2003-04-14Unlink FIFO and pid files on clean shutdown. PR#3199Hakan Olsson
2002-12-03Add -4/-6 cmdline options to select what address family (IPv4,v6) to use.Hakan Olsson
niklas@ ok.
2002-11-27Make sure daemon() does not close any fd opened during initialization.Hakan Olsson
niklas@ ok.
2002-11-21-Wshadow nits.Hakan Olsson
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-07Before detaching, log output should go to stderr, not syslog.Hakan Olsson
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-05-26pid_t cleanupTheo de Raadt
2001-12-11Don't hang waiting for select() with SIGTERM + no active SAs.Hakan Olsson
2001-12-10Add UI option 'R' to trigger isakmpd reinit (same as SIGHUP).Hakan Olsson
2001-10-26Sometimes the daemon will not die promptly on SIGTERM, even thoughHakan Olsson
all DELETE notifications is sent out. Create a prioritized send-queue for the DELETE messages to solve this. Some (C)-2001. niklas@ ok.
2001-08-24Send DELETE notifications for all active SAs when we shut down the daemon.Hakan Olsson
This "clean" shutdown happens on SIGTERM ('kill <pid>') or if a 'Q' command is input to the fifo UI. Suggested by <Ghislaine.Labouret@hsc.fr>.
2001-08-23Reinitialize transports on SIGUP.Angelos D. Keromytis
2001-08-23recieve -> receiveAaron Campbell
2001-07-05Add prototypes and some other various cleanup.Hakan Olsson
2001-07-01strict strtol checking. text2sockaddr/sockaddr2text implementationsNiklas Hallqvist
for systems without get{addr,name}info calls. Some style police.
2001-06-29IPv6 support, by niklas@ and me.Hakan Olsson
2001-04-09More style fixes...Hakan Olsson
2001-04-09isakmpd can now capture un-encrypted IKE negotiation packets to aHakan Olsson
file. In pcap(3) format, so tcpdump(8) can read it. Idea by Tim Newsham <newsham@lava.net>, work by him and me. Ok angelos@, niklas@
2001-04-07Add missing filename argument.Hakan Olsson
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26Pedantic style policeNiklas Hallqvist
2000-10-07isakmp_doi.h: Merge with EOM 1.1Niklas Hallqvist
isakmpd.c: Merge with EOM 1.54
2000-06-08Merge with EOM 1.52Niklas Hallqvist
author: angelos Add the -R option in getopt!!!