summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/policy.c
AgeCommit message (Collapse)Author
2003-11-06Style nits.Hakan Olsson
2003-07-25add sha2 support; ok ho@Markus Friedl
2003-06-10boring cleanupsTheo de Raadt
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2003-05-18More isakmpd privsep work. X509 private keys are now kept in the privilegedHakan Olsson
process only. Various cleanup and bugfixes. markus@ ok
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
There are some kinks left, so keep it default disabled for now. markus@ says ok to commit.
2003-05-14Policy file default defined twice, kill the local copy.Hakan Olsson
2003-05-14I did not test this enough. Unbreak.Hakan Olsson
2003-05-12AES -> AES_128_CBCHakan Olsson
2002-11-14Use %d instead of %2d for better matching. From Mike Neuman. Fixes PR#2848.Hakan Olsson
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-06-15ecn_* policy attributes --- ok ho@Angelos D. Keromytis
2002-06-10The dlopen() stuff goes away.Hakan Olsson
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-05-28off_t to size_t change for printf format and malloc. Pointed out by ↵Hakan Olsson
<greg@nest.cx>
2002-01-23Actually return the ESP/AH/COMP ground descriptions for policyAngelos D. Keromytis
comparisons -- from cjkim2000@yahoo.com
2002-01-23no more strcpy/sprintfHakan Olsson
2002-01-23strcpy->strlcpy, sprintf->snprintfHakan Olsson
2002-01-03strftime format fixes. From Christo Butcher <christo@fox-it.com>.Hakan Olsson
2001-08-26more styleNiklas Hallqvist
2001-08-25Use x509_DN_string API. Style fixes.Niklas Hallqvist
2001-08-24I was only going to remove #include "init.h", but found 8 moreHakan Olsson
#include's we don't need here.
2001-08-11Allocate slightly larger buffer for cert.Angelos D. Keromytis
2001-07-05DER_ASN1_DN ID handling --- untestedAngelos D. Keromytis
2001-07-04Better handling of Key IDs.Angelos D. Keromytis
2001-07-03Fix policy information for IPv6 subnet/range cases. This is ugly, I'llAngelos D. Keromytis
have to find another way of dealing with IPv6 addresses.
2001-07-03Wait with strlcpy a while, change to strncpy.Hakan Olsson
2001-07-03use strlcpy instead of memcpy to copy stringsHakan Olsson
2001-07-01StyleNiklas Hallqvist
2001-07-01Start support for IPv6 addresses in policy.Angelos D. Keromytis
2001-07-01Fix remote_negotiation_address attribute; fix sockaddr2text() returnAngelos D. Keromytis
value when zero-filling; log_error()->log_print() consistently.
2001-06-29Change get_src/get_dst API as we get the length with sa_len.Hakan Olsson
2001-06-29Initial IPv6 support. (niklas@ ok)Hakan Olsson
2001-06-07No need to allocate/free X509 policy information -- the certs areAngelos D. Keromytis
converted as needed, and the CA certs are irrelevant.
2001-06-07Get rid of the main policy session (unnecessary).Angelos D. Keromytis
2001-06-07Add some log_print()Angelos D. Keromytis
2001-05-31Routines for handling KeyNote cert representation.Angelos D. Keromytis
2001-04-09Style police a'la niklas@.Hakan Olsson
2001-04-05As the isakmpd.policy file can contain sensitive information, we wantHakan Olsson
the same mode checks we use for isakmpd.conf. Style.
2001-03-14Make these compile again...Thorsten Lockert
2001-03-14Indentation and style fascismNiklas Hallqvist
2001-03-13Add logging classes for Negotiation and Policy, and change a number ofHakan Olsson
debug messages to use these instead. Change a number of 'log_print' to debug messages to keep the noise down. Use 'log_error' instead of 'log_print' in some cases when we have errno. Some indentation fixes. (niklas@ ok)
2001-03-07Oops, use the right legnth for the key id.Angelos D. Keromytis
2001-03-07Add KEY_ID support (mostly from roland@digitalvampire.org)Angelos D. Keromytis
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26Pedantic style policeNiklas Hallqvist
2001-01-10Handle null remote_id/local_filter/remote_filter nicer.Angelos D. Keromytis
2000-11-23policy.c: Merge with EOM 1.49Niklas Hallqvist
util.h: Merge with EOM 1.10 author: niklas style and removal of unused, unneeded code