summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/message.c
AgeCommit message (Collapse)Author
2007-06-02safer snprintf construct with more paranoid length calculationPeter Valchev
ok millert
2007-04-16There's no point in checking ptr for NULL before doing free(ptr)Moritz Jodeit
since free(NULL) is just fine. ok hshoexer@
2007-04-15Fix interop-issue with vpn peers that start reyking on port 4500 whenHans-Joerg Hoexer
NAT-T is used. Solves problems with cisco and openswan. Tested by todd@ (cisco interop), ok ho@ Original fix with Stefan Roth (stefan dot roth at siemens dot com), thanks!
2006-12-05plug memleak, noticed by jesus@mxtelecom.comHans-Joerg Hoexer
ok moritz@, tested by jesus@mxtelecom.com (thanks!)
2006-12-05Don't leak message structures, when we see unsupported payloadsMoritz Jodeit
or if the payload node allocation fails. Also adjust a comment to make it more clear, who's responsible for freeing the message structs. Input from cloder@. OK hshoexer@
2006-10-29Fix TAILQ usage, preventing crashesPedro Martelletto
Okay henning@ krw@ millert@ hshoexer@
2006-07-02Let isakmpd send out a vendor ID announcing isamkpds release version.Hans-Joerg Hoexer
Will be handy for release specific bug fixes, etc. Suggested by markus@ quite some time ago. ok markus@
2006-06-02Big spelling cleanup, no binary change. From david@Hans-Joerg Hoexer
2006-05-31Make sure, that phase 1 SAs of active connections stay alive. Fixes a DPDHans-Joerg Hoexer
breakage noticed and reported by Mitja Muzenic. ok markus@ ho@, testing by Mitja and cloder@, discussed with Nathanael.
2006-05-30fix SA grouping. Now, esp+ah and ah+esp works again.Hans-Joerg Hoexer
ok markus@
2005-10-25Do not send a message when no transport is available.Hans-Joerg Hoexer
ok cloder ho
2005-09-23Provide UI commands to delete phase 1 SAs.Hans-Joerg Hoexer
Looks good mortiz@
2005-07-20revert one TAILQ_FOREACH conversion from r1.112 which wasMoritz Jodeit
wrong and broke some isakmpd setups. ok hshoexer@
2005-06-26indentation/white space cleanup, no binary changeHans-Joerg Hoexer
2005-05-26Use TAILQ_FOREACH where possible, remove payload_last()Hans-Joerg Hoexer
ok markus
2005-05-26get rid of payload mappingHans-Joerg Hoexer
ok markus ho cloder
2005-05-25Fix a commentHans-Joerg Hoexer
2005-05-18allow payload types 20 and 21 for nat-tHans-Joerg Hoexer
ok ho
2005-04-09knfTheo de Raadt
2005-04-08get rid of sysdep_sa_lenHans-Joerg Hoexer
ok cloder@
2005-04-08move __inline to right placeTheo de Raadt
2005-04-08USE_DEBUG is bye byeTheo de Raadt
2005-04-08always enable aggressive, dpd, and isakmp_cfgTheo de Raadt
2005-04-08nat-traversal alwaysTheo de Raadt
2005-04-07small cleanup, no binary changeHans-Joerg Hoexer
2005-04-07Plug memleak.Hans-Joerg Hoexer
ok cloder ho markus
2005-04-06knf, ok cloderTheo de Raadt
2005-04-04spacing; ok cloderTheo de Raadt
2005-03-05No need to allocate a local digest buffer. Cleanup error path. hshoexer@ ok.Hakan Olsson
2005-03-05Silence a couple of annoying gcc3 warnings. hshoexer@ ok.Hakan Olsson
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2005-02-24Never respond to 0-length UDP packets. Reduces, but does not eliminateChad Loder
probability that isakmp service will be detected during port scans. OK hoexer@
2005-02-22build delete messages for isakmp sa correctly.Hans-Joerg Hoexer
ok and help ho@
2005-01-29Handle some pointers more carefully. From pat@ some while ago.Hans-Joerg Hoexer
ok ho@
2004-12-14Reword comment a bit for clarity. hshoexer@ ok.Hakan Olsson
2004-12-10check msg->isakmp_sa != NULL before the transport gets updated; ok hshoexerMarkus Friedl
2004-12-08NAT/T: replace the isakmpd SA transport with the transport from theMarkus Friedl
message (only during phase 1). this avoids DPD messages to the 'wrong' port. ok hshoexer
2004-09-17Permit next payload type NAT-OA. Noted by Kamel Messaoudi.Hakan Olsson
2004-08-17check for msg->isakmpg_sa being NULL before referencingHans-Joerg Hoexer
ok ho@
2004-08-10Better implementation of the Dead Peer Detection protocol, RFC 3706.Hakan Olsson
hshoexer@ ok.
2004-08-08spacingTheo de Raadt
2004-07-07plug memleak when receiving an INVALID_HASH_INFORMATION notify.Hans-Joerg Hoexer
Found by Patrick Latifi, thanks! ok ho@
2004-06-21Packet capture should add the ESP-marker when NAT-T is active.Hakan Olsson
2004-06-20message_parse_payloads should accept payloads in the private range.Hakan Olsson
While here, also cleanup some messages.
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.
2004-06-20NAT-Traversal for isakmpd. Work in progress...Hakan Olsson
hshoexer@ ok.
2004-06-20Some vendors send the last Aggressive Mode message unencrypted, which weHakan Olsson
should accept. Problem noted by alex at vbone.net. hshoexer@ ok.
2004-06-14added a missing message_free().Hans-Joerg Hoexer
ok ho@
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-11typo in commentBrad Smith
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-01 12:45:57 +0000