summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/isakmpd.c
AgeCommit message (Collapse)Author
2005-06-25/* Fallthrough. */ -> /* FALLTHROUGH */Hans-Joerg Hoexer
now that's useable with lint
2005-05-26Add ARGSUSED for lint, one comment for meHans-Joerg Hoexer
2005-05-03Remove SIGUSR2-related stuff as suggested by ho@.Moritz Jodeit
SA rehashing won't happen anytime soon. ok hshoexer@
2005-05-03fix signal race, when child dies before the monitorMoritz Jodeit
sets it's signal handlers. ok hshoexer@ ho@
2005-04-10- sort synopsis + options listJason McIntyre
- sync usage() - tidy up lists and displays - misc tweaks
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-08USE_DEBUG is bye byeTheo de Raadt
2005-04-08keynote and policy always compiled inTheo de Raadt
2005-04-08nat-traversal alwaysTheo de Raadt
2005-04-08privsep alwaysTheo de Raadt
2005-04-08kill HAVE_CLOSEFROMTheo de Raadt
2005-04-08more __prognameTheo de Raadt
2005-04-08use __prognameTheo de Raadt
2005-04-05Add -T flag to isakmpd to disable NAT-T support from the command line.Chad Loder
This lets binat setups work again without having to recompile isakmpd. OK ho, hshoexer.
2005-04-04spacing; ok cloderTheo de Raadt
2005-03-22Compile when nat_traversal is disabled.Chad Loder
OK hshoexer
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2005-02-25forgot to remove -P from getopt().Hans-Joerg Hoexer
2005-02-25Zap -P option. It has never done anything. While there tweak descripton ofHans-Joerg Hoexer
-N. zap -P ok ho@
2005-02-24Add -N switch to select port for udpencap. Thus it's possible to run multipleHans-Joerg Hoexer
isakmpds on different ports specified with -p and -N. ok ho@
2005-02-16On shutdown also send delete messages for isakmp SAs.Hans-Joerg Hoexer
ok ho
2004-09-17avoid signal race.Hans-Joerg Hoexer
ok ho@ otto@
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-23Add commandline switch -a / config tag "Acquire-Only" to tell isakmpd to notHans-Joerg Hoexer
touch flows. initial work by markus ok markus@ ho@ henning@
2004-06-20To make debugging the unprivileged child process easier, make 'isakmpd -dd'Hakan Olsson
pause just after privsep; print the PIDs and wait for SIGCONT. hshoexer@ ok
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-19Permit symbolic protocol and service names, such as "Protocol= tcp", in theHakan Olsson
<IPsec-ID> sections. hshoexer@ ok
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-04-08Set timezone before privsep, child uses now correct timezone.Hans-Joerg Hoexer
Noticed by david@ ok ho@ david@
2004-03-31Don't assume closefrom(2) exists everywhere. hshoexer@, markus@ ok.Hakan Olsson
2004-03-19Add missing bits to make already present privsep code work. Enable privsep.Hans-Joerg Hoexer
ok ho@ deraadt@ markus@
2004-02-19small cleanup of log messages.Hans-Joerg Hoexer
ok ho@
2004-02-19With -d, SIGINT should do a clean shutdown.Hakan Olsson
Without -d, logs should be sent to syslog, level LOG_INFO.
2004-02-19Cleanup.Hakan Olsson
2004-01-16Added -v option. Enables logging of successful exchange completion.Hans-Joerg Hoexer
ok ho@
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-05-18More isakmpd privsep work. X509 private keys are now kept in the privilegedHakan Olsson
process only. Various cleanup and bugfixes. markus@ ok
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
There are some kinks left, so keep it default disabled for now. markus@ says ok to commit.
2003-05-14Fix a typo (in unused code).Hakan Olsson
2003-04-14Unlink FIFO and pid files on clean shutdown. PR#3199Hakan Olsson
2002-12-03Add -4/-6 cmdline options to select what address family (IPv4,v6) to use.Hakan Olsson
niklas@ ok.
2002-11-27Make sure daemon() does not close any fd opened during initialization.Hakan Olsson
niklas@ ok.
2002-11-21-Wshadow nits.Hakan Olsson
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-07Before detaching, log output should go to stderr, not syslog.Hakan Olsson
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-05-26pid_t cleanupTheo de Raadt