summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/isakmpd.c
AgeCommit message (Collapse)Author
2013-04-24remove old backwards random junkTheo de Raadt
ok mikeb
2013-03-21remove excessive includesTheo de Raadt
2010-04-15Log when isakmpd starts - patch from Toni Muellerlum
ok ho@ mpf@ krw@ sthen@ kjell@
2008-05-12Error out with usage line if additional arguments are given after thePierre-Yves Ritschard
option parsing. Found out the hard way by jdixon on ifstated. ok sobrado@, jdixon@, millert@
2007-04-02Don't let -r fall through to the next case block,Moritz Jodeit
if INSECURE_RAND is defined. ok hshoexer@
2006-09-01Add a new UI command to force isakmpd into passive only mode.Marco Pfatschbacher
Will be used by sasyncd to prevent two talking isakmpd's in an HA setup. Based on a diff by ho@. OK ho@, hshoexer@, deraadt@
2006-08-30Make SA deletion on shutdown the default again. Use -S for failoverHans-Joerg Hoexer
situations where you do not want this. Discussed and agreed on with ho, mcbride, markus, cloder,... We will have to teach sasyncd to deal with this. Testing by msf and hshoexer with help from mtu ok markus cloder
2006-06-10Make deletion of SAs on shutdown optional. The default behaviourHans-Joerg Hoexer
now is to not delete SAs. Needed for reliable ipsec failover. Suggested by mtu@. Moreover, this ensures that packets do not leak when isakmpd is shutdown. ok mcbride@, testing mtu@
2006-06-01Fix a commentHans-Joerg Hoexer
2006-03-20make sure the command fifo is ready before isakmpd returns. ThisHans-Joerg Hoexer
resolves a startup race when interacting with ipsecctl. Suggested by and discussed with moritz@ ok moritz@
2005-12-20let isakmpd(8) remove it's pid/fifo file on exit.Moritz Jodeit
rework signal handling in the monitor process to let this work. testing and ok hshoexer@
2005-06-25/* Fallthrough. */ -> /* FALLTHROUGH */Hans-Joerg Hoexer
now that's useable with lint
2005-05-26Add ARGSUSED for lint, one comment for meHans-Joerg Hoexer
2005-05-03Remove SIGUSR2-related stuff as suggested by ho@.Moritz Jodeit
SA rehashing won't happen anytime soon. ok hshoexer@
2005-05-03fix signal race, when child dies before the monitorMoritz Jodeit
sets it's signal handlers. ok hshoexer@ ho@
2005-04-10- sort synopsis + options listJason McIntyre
- sync usage() - tidy up lists and displays - misc tweaks
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-08USE_DEBUG is bye byeTheo de Raadt
2005-04-08keynote and policy always compiled inTheo de Raadt
2005-04-08nat-traversal alwaysTheo de Raadt
2005-04-08privsep alwaysTheo de Raadt
2005-04-08kill HAVE_CLOSEFROMTheo de Raadt
2005-04-08more __prognameTheo de Raadt
2005-04-08use __prognameTheo de Raadt
2005-04-05Add -T flag to isakmpd to disable NAT-T support from the command line.Chad Loder
This lets binat setups work again without having to recompile isakmpd. OK ho, hshoexer.
2005-04-04spacing; ok cloderTheo de Raadt
2005-03-22Compile when nat_traversal is disabled.Chad Loder
OK hshoexer
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2005-02-25forgot to remove -P from getopt().Hans-Joerg Hoexer
2005-02-25Zap -P option. It has never done anything. While there tweak descripton ofHans-Joerg Hoexer
-N. zap -P ok ho@
2005-02-24Add -N switch to select port for udpencap. Thus it's possible to run multipleHans-Joerg Hoexer
isakmpds on different ports specified with -p and -N. ok ho@
2005-02-16On shutdown also send delete messages for isakmp SAs.Hans-Joerg Hoexer
ok ho
2004-09-17avoid signal race.Hans-Joerg Hoexer
ok ho@ otto@
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-23Add commandline switch -a / config tag "Acquire-Only" to tell isakmpd to notHans-Joerg Hoexer
touch flows. initial work by markus ok markus@ ho@ henning@
2004-06-20To make debugging the unprivileged child process easier, make 'isakmpd -dd'Hakan Olsson
pause just after privsep; print the PIDs and wait for SIGCONT. hshoexer@ ok
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-19Permit symbolic protocol and service names, such as "Protocol= tcp", in theHakan Olsson
<IPsec-ID> sections. hshoexer@ ok
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-04-08Set timezone before privsep, child uses now correct timezone.Hans-Joerg Hoexer
Noticed by david@ ok ho@ david@
2004-03-31Don't assume closefrom(2) exists everywhere. hshoexer@, markus@ ok.Hakan Olsson
2004-03-19Add missing bits to make already present privsep code work. Enable privsep.Hans-Joerg Hoexer
ok ho@ deraadt@ markus@
2004-02-19small cleanup of log messages.Hans-Joerg Hoexer
ok ho@
2004-02-19With -d, SIGINT should do a clean shutdown.Hakan Olsson
Without -d, logs should be sent to syslog, level LOG_INFO.
2004-02-19Cleanup.Hakan Olsson
2004-01-16Added -v option. Enables logging of successful exchange completion.Hans-Joerg Hoexer
ok ho@
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-05-18More isakmpd privsep work. X509 private keys are now kept in the privilegedHakan Olsson
process only. Various cleanup and bugfixes. markus@ ok
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
There are some kinks left, so keep it default disabled for now. markus@ says ok to commit.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-03 03:09:40 +0000