Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-05-05 | Kill a log message which looks like an error message but is actually | Chad Loder | |
both meaningless and harmless. ("nat_t_check_vendor_payload: bad size") ok todd | |||
2007-04-16 | There's no point in checking ptr for NULL before doing free(ptr) | Moritz Jodeit | |
since free(NULL) is just fine. ok hshoexer@ | |||
2007-02-22 | Add a comment that explains, why the VID of draft 2 NAT-T includes | Hans-Joerg Hoexer | |
a traling '\n'. suggested by and ok deraadt@, jmc@ | |||
2006-06-14 | indentation. | Hans-Joerg Hoexer | |
2005-07-25 | Use payload NAT-D or NAT-D-DRAFT according to NAT-T vendor ID advertised by the | Hans-Joerg Hoexer | |
peer. looks good ho | |||
2005-06-02 | unbreak port floating, noticed by sean at obstacle9 dot com | Hans-Joerg Hoexer | |
ok cloder | |||
2005-05-18 | allow payload types 20 and 21 for nat-t | Hans-Joerg Hoexer | |
ok ho | |||
2005-04-08 | Make deterministic randomness (only ever used for testing) a compile-time | Chad Loder | |
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer | |||
2005-04-05 | Add -T flag to isakmpd to disable NAT-T support from the command line. | Chad Loder | |
This lets binat setups work again without having to recompile isakmpd. OK ho, hshoexer. | |||
2005-04-04 | spacing; ok cloder | Theo de Raadt | |
2005-03-05 | Add RFC3947 NAT-T vendor ID string. hshoexer@ ok. | Hakan Olsson | |
2005-02-27 | where possible, use bzero instead of memset | Hans-Joerg Hoexer | |
ok cloder henning | |||
2004-11-18 | use hash and not hmac to calculate NAT-D payloads. Also add NAT-D payload for | Hans-Joerg Hoexer | |
the destination address first. Remove support for obsolete V1 NAT-T. This fixes interoperability problems with non-openbsd isakmpd implementations. "looks good" ho@, ok markus@ for hash/hmac testing by various people (thanks!) | |||
2004-08-08 | spacing | Theo de Raadt | |
2004-08-03 | Rewrite the transport reference count code to avoid leaks. | Hakan Olsson | |
hshoexer@ ok. | |||
2004-07-29 | Repair NAT-T using Aggressive mode, NAT-D checks were in the wrong place. | Hakan Olsson | |
Noted by Yvan VANHULLEBUS. | |||
2004-06-30 | Compile cleanly with gcc3.3.2. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-21 | Implement NAT-T keepalive messages. | Hakan Olsson | |
2004-06-20 | Make the payload array in struct message dynamic, since we need to handle | Hakan Olsson | |
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls. | |||
2004-06-20 | NAT-Traversal for isakmpd. Work in progress... | Hakan Olsson | |
hshoexer@ ok. |