summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/nat_traversal.c
AgeCommit message (Collapse)Author
2007-05-05Kill a log message which looks like an error message but is actuallyChad Loder
both meaningless and harmless. ("nat_t_check_vendor_payload: bad size") ok todd
2007-04-16There's no point in checking ptr for NULL before doing free(ptr)Moritz Jodeit
since free(NULL) is just fine. ok hshoexer@
2007-02-22Add a comment that explains, why the VID of draft 2 NAT-T includesHans-Joerg Hoexer
a traling '\n'. suggested by and ok deraadt@, jmc@
2006-06-14indentation.Hans-Joerg Hoexer
2005-07-25Use payload NAT-D or NAT-D-DRAFT according to NAT-T vendor ID advertised by theHans-Joerg Hoexer
peer. looks good ho
2005-06-02unbreak port floating, noticed by sean at obstacle9 dot comHans-Joerg Hoexer
ok cloder
2005-05-18allow payload types 20 and 21 for nat-tHans-Joerg Hoexer
ok ho
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
2005-04-05Add -T flag to isakmpd to disable NAT-T support from the command line.Chad Loder
This lets binat setups work again without having to recompile isakmpd. OK ho, hshoexer.
2005-04-04spacing; ok cloderTheo de Raadt
2005-03-05Add RFC3947 NAT-T vendor ID string. hshoexer@ ok.Hakan Olsson
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2004-11-18use hash and not hmac to calculate NAT-D payloads. Also add NAT-D payload forHans-Joerg Hoexer
the destination address first. Remove support for obsolete V1 NAT-T. This fixes interoperability problems with non-openbsd isakmpd implementations. "looks good" ho@, ok markus@ for hash/hmac testing by various people (thanks!)
2004-08-08spacingTheo de Raadt
2004-08-03Rewrite the transport reference count code to avoid leaks.Hakan Olsson
hshoexer@ ok.
2004-07-29Repair NAT-T using Aggressive mode, NAT-D checks were in the wrong place.Hakan Olsson
Noted by Yvan VANHULLEBUS.
2004-06-30Compile cleanly with gcc3.3.2.Hans-Joerg Hoexer
ok ho@
2004-06-21Implement NAT-T keepalive messages.Hakan Olsson
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.
2004-06-20NAT-Traversal for isakmpd. Work in progress...Hakan Olsson
hshoexer@ ok.