summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/message.c
AgeCommit message (Collapse)Author
2005-10-25Do not send a message when no transport is available.Hans-Joerg Hoexer
ok cloder ho
2005-09-23Provide UI commands to delete phase 1 SAs.Hans-Joerg Hoexer
Looks good mortiz@
2005-07-20revert one TAILQ_FOREACH conversion from r1.112 which wasMoritz Jodeit
wrong and broke some isakmpd setups. ok hshoexer@
2005-06-26indentation/white space cleanup, no binary changeHans-Joerg Hoexer
2005-05-26Use TAILQ_FOREACH where possible, remove payload_last()Hans-Joerg Hoexer
ok markus
2005-05-26get rid of payload mappingHans-Joerg Hoexer
ok markus ho cloder
2005-05-25Fix a commentHans-Joerg Hoexer
2005-05-18allow payload types 20 and 21 for nat-tHans-Joerg Hoexer
ok ho
2005-04-09knfTheo de Raadt
2005-04-08get rid of sysdep_sa_lenHans-Joerg Hoexer
ok cloder@
2005-04-08move __inline to right placeTheo de Raadt
2005-04-08USE_DEBUG is bye byeTheo de Raadt
2005-04-08always enable aggressive, dpd, and isakmp_cfgTheo de Raadt
2005-04-08nat-traversal alwaysTheo de Raadt
2005-04-07small cleanup, no binary changeHans-Joerg Hoexer
2005-04-07Plug memleak.Hans-Joerg Hoexer
ok cloder ho markus
2005-04-06knf, ok cloderTheo de Raadt
2005-04-04spacing; ok cloderTheo de Raadt
2005-03-05No need to allocate a local digest buffer. Cleanup error path. hshoexer@ ok.Hakan Olsson
2005-03-05Silence a couple of annoying gcc3 warnings. hshoexer@ ok.Hakan Olsson
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2005-02-24Never respond to 0-length UDP packets. Reduces, but does not eliminateChad Loder
probability that isakmp service will be detected during port scans. OK hoexer@
2005-02-22build delete messages for isakmp sa correctly.Hans-Joerg Hoexer
ok and help ho@
2005-01-29Handle some pointers more carefully. From pat@ some while ago.Hans-Joerg Hoexer
ok ho@
2004-12-14Reword comment a bit for clarity. hshoexer@ ok.Hakan Olsson
2004-12-10check msg->isakmp_sa != NULL before the transport gets updated; ok hshoexerMarkus Friedl
2004-12-08NAT/T: replace the isakmpd SA transport with the transport from theMarkus Friedl
message (only during phase 1). this avoids DPD messages to the 'wrong' port. ok hshoexer
2004-09-17Permit next payload type NAT-OA. Noted by Kamel Messaoudi.Hakan Olsson
2004-08-17check for msg->isakmpg_sa being NULL before referencingHans-Joerg Hoexer
ok ho@
2004-08-10Better implementation of the Dead Peer Detection protocol, RFC 3706.Hakan Olsson
hshoexer@ ok.
2004-08-08spacingTheo de Raadt
2004-07-07plug memleak when receiving an INVALID_HASH_INFORMATION notify.Hans-Joerg Hoexer
Found by Patrick Latifi, thanks! ok ho@
2004-06-21Packet capture should add the ESP-marker when NAT-T is active.Hakan Olsson
2004-06-20message_parse_payloads should accept payloads in the private range.Hakan Olsson
While here, also cleanup some messages.
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.
2004-06-20NAT-Traversal for isakmpd. Work in progress...Hakan Olsson
hshoexer@ ok.
2004-06-20Some vendors send the last Aggressive Mode message unencrypted, which weHakan Olsson
should accept. Problem noted by alex at vbone.net. hshoexer@ ok.
2004-06-14added a missing message_free().Hans-Joerg Hoexer
ok ho@
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-11typo in commentBrad Smith
2004-06-10Mark authenticated messages explicitly. Better check for authentication beforeHans-Joerg Hoexer
deleteing SAs. This fix is needed to solve the problems reported by Thomas Walpuski, previous diff was not sufficient. Pointed out by Thomas. Thanks! ok ho@ niklas@, testing and spellcheck by todd@ msf@
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-06-09only accept DELETEs during an authenticated INFORMATIONAL exchange.Hans-Joerg Hoexer
Fix for recent problem disclosed by Thomas Walpuski. ok ho@
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-04-29Better checking of minimum payload lengths. Drop out safely when an unknownHans-Joerg Hoexer
payload type is encountered. While around, do some KNF. ok ho@
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-04-07-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-03-10Fix payload handling flaws found by cloder@. Based on initial patch byHans-Joerg Hoexer
cloder@. Testing by markus@ cloder@ hshoexer@. ok ho@
2004-03-10Plug up memory leak.Hans-Joerg Hoexer
ok ho@
2004-03-10Reduce some noise on receipt of an invalid spi.Hans-Joerg Hoexer
ok ho@