summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/sa.c
AgeCommit message (Collapse)Author
1999-04-05Merge with EOM 1.76Niklas Hallqvist
Allocation failure reporting. Debug printouts. Typecast correctly. New finalize API. Free keystate.
1999-04-02Merge with EOM 1.74Niklas Hallqvist
refcounting on exchanges Do not malloc zero bytes, some implementations dislike Only find non-replaced SAs when searching by name resource track exchange->name and sa->name
1999-03-31Merge with EOM 1.70Niklas Hallqvist
Add refcounting to SA's. Make phase 1 expirations be able to cause renegotiations if configured to.
1999-03-31Merge with EOM 1.69Niklas Hallqvist
Add debugging. Provide a way to say an SA has been replaced wrt the flows. Do not free the flow information before calling the sysdep delete_spi routine, as it may use it.
1999-03-24Merge with EOM 1.68Niklas Hallqvist
Stash SPIs in the right slots
1999-03-02sa.c: Merge with EOM 1.67Niklas Hallqvist
Add SA attributes, specifically stayalive sa.h: Merge with EOM 1.42 Add SA attributes, specifically stayalive pf_encap.c: Merge with EOM 1.46 Add SA attributes, specifically stayalive exchange.c: Merge with EOM 1.65 Add SA attributes, specifically stayalive
1999-02-26Merge from the Ericsson repositoryNiklas Hallqvist
| revision 1.66 | date: 1999/02/25 11:39:20; author: niklas; state: Exp; lines: +3 -1 | include sysdep.h everywhere | ---------------------------- | revision 1.65 | date: 1999/02/25 10:21:33; author: niklas; state: Exp; lines: +2 -2 | Replay window changes was done at the wrong level | ---------------------------- | revision 1.64 | date: 1999/02/25 09:30:30; author: niklas; state: Exp; lines: +6 -1 | Replay protection window configurable | ---------------------------- | revision 1.63 | date: 1999/02/14 00:11:38; author: niklas; state: Exp; lines: +52 -27 | Generalize how to find SAs with given attributes. Do SA expiration both hard | and soft, and do not rekey automatically anymore. We will revisit this by | adding some kind of policy what to do at these times. Improve commentary | ---------------------------- | revision 1.62 | date: 1999/02/06 15:07:23; author: niklas; state: Exp; lines: +3 -1 | remove referense to rekey event when it has happened | ----------------------------
1998-12-21Last months worth of work on isakmpd, lots doneNiklas Hallqvist
1998-11-20typoNiklas Hallqvist
1998-11-17From the EOM repos: Only find ready ISAKMP SAs inNiklas Hallqvist
sa_isakmp_lookup_by_peer
1998-11-17Add RCS Ids from the EOM repositoryNiklas Hallqvist
1998-11-15openBSD RCS IDsNiklas Hallqvist
1998-11-15Initial import of isakmpd, an IKE (ISAKMP/Oakley) implementation for theNiklas Hallqvist
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by Ericsson Radio Systems. It is not yet complete or usable in a real scenario but the missing pieces will soon be there. The early commit is for people who wants early access and who are not afraid of looking at source. isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so far, so it is not that incomplete. It is really mostly configuration that is lacking.