Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-08-10 | Better implementation of the Dead Peer Detection protocol, RFC 3706. | Hakan Olsson | |
hshoexer@ ok. | |||
2004-08-08 | spacing | Theo de Raadt | |
2004-08-02 | Do not expire unestablished phase 2 SAs on SIGHUP. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-21 | Implement NAT-T keepalive messages. | Hakan Olsson | |
2004-05-23 | More KNF. Mainly spaces and line-wraps, no binary change. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-13 | Extensions to the FIFO interface: | Hakan Olsson | |
"C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok. | |||
2004-04-15 | partial move to KNF. More to come. This has happened because there | Theo de Raadt | |
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer | |||
2004-04-07 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |
2004-04-07 | More careful when walking LIST queues. hshoexer@, david@ ok. | Hakan Olsson | |
2004-03-19 | Add missing bits to make already present privsep code work. Enable privsep. | Hans-Joerg Hoexer | |
ok ho@ deraadt@ markus@ | |||
2004-02-27 | (C)-2004 | Hakan Olsson | |
2004-02-27 | Follow RFC 2408 more closely regarding how to better check the proposal | Hakan Olsson | |
returned by the other peer (the responder). Some implementations (notably the Cisco PIX) does not follow a SHOULD in section 4.2 of the RFC. With certain proposal combinations this caused us to setup the wrong SA resulting in us being unable to process incoming IPsec traffic (over this tunnel). Tested against a number of different IKE implementations. hshoexer@ ok. | |||
2004-01-06 | small typos fixed. | Hans-Joerg Hoexer | |
ok markus@ | |||
2003-07-25 | add sha2 support; ok ho@ | Markus Friedl | |
2003-06-04 | Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos | Hakan Olsson | |
D. Keromytis and Niels Provos. | |||
2003-06-03 | Cleanup. Use 'sizeof variable' instead of magic constants. | Hakan Olsson | |
2003-05-18 | Add a debug message to sa_reinit() to indicate when we renegotiate | Hakan Olsson | |
active connections. | |||
2003-05-16 | If the "Renegotiate-on-HUP" tag is defined in the [General] section, a | Hakan Olsson | |
HUP signal (or "R" to the FIFO) will also renegotiate all Phase 2 SAs, i.e all connections. ok niklas@, tested and ok kjell@. | |||
2003-05-15 | Cleanup. Do not store the private key in either the exchange or sa structs. | Hakan Olsson | |
2003-05-14 | I did not test this enough. Unbreak. | Hakan Olsson | |
2003-05-12 | AES -> AES_128_CBC | Hakan Olsson | |
2002-11-21 | -Wshadow nits. | Hakan Olsson | |
2002-09-08 | Fix -pedantic errors. | Hakan Olsson | |
2002-06-10 | The dlopen() stuff goes away. | Hakan Olsson | |
2002-06-09 | rm trailing whitespace | Todd T. Fries | |
2002-06-07 | typo | Hakan Olsson | |
2002-06-07 | Add 'ikecfg' as a valid Flags= value. | Hakan Olsson | |
2002-06-06 | style | Hakan Olsson | |
2002-06-06 | Style, and a few additional format/type mods. | Hakan Olsson | |
2002-06-01 | size_t must be cast to (unsigned long) and printed using %lu | Theo de Raadt | |
2002-05-28 | Proper types in format strings. From <greg@nest.cx> | Hakan Olsson | |
2002-05-23 | One last sprintf -> snprintf, requested by deraadt. | Hakan Olsson | |
2002-03-17 | Move SA_FILE definition to sa.h. | Angelos D. Keromytis | |
2002-03-17 | Add 'T' and 'S' commands (for tearing-down and reporting all Phase 2 | Angelos D. Keromytis | |
SAs), from bdallen@nps.navy.mil | |||
2002-01-25 | no static for sa_dump, explicit log cls/level | Hakan Olsson | |
2001-11-21 | %qd -> %llu in a couple of other places | Hakan Olsson | |
2001-11-21 | Have sa_dump() also print SA lifetimes (for /var/run/isakmpd.report). | Hakan Olsson | |
2001-10-26 | Change to use sysdep_sa_len() function. | Hakan Olsson | |
2001-08-15 | Some more style... | Hakan Olsson | |
2001-07-05 | Add prototypes and some other various cleanup. | Hakan Olsson | |
2001-07-01 | Style | Niklas Hallqvist | |
2001-06-29 | Change get_src/get_dst API as we get the length with sa_len. | Hakan Olsson | |
2001-06-29 | A few more direct sa_len usages. | Hakan Olsson | |
2001-06-07 | Correctly initialize the policy_id field on SA structures, such that | Angelos D. Keromytis | |
failed SAs don't cause the default policy context to be free'ed (and thus cause no end of trouble in establishing further Phase 1 SAs) | |||
2001-05-31 | Appropriately release the cert and key fields in the SA structure on free. | Angelos D. Keromytis | |
2001-04-24 | Correct SA refcounting. Fixes a bug where isakmpd could die when a peer was | Niklas Hallqvist | |
discovered to have rebooted, and old now invalid SAs had to be garbage- collected. | |||
2001-04-09 | More style fixes... | Hakan Olsson | |
2001-03-06 | Print the name of the marked SA (if available). | Angelos D. Keromytis | |
2001-02-24 | Make DES a feature, so isakmpd can compile on Linux (most of the fixed | Angelos D. Keromytis | |
by newsham@lava.net) | |||
2001-01-27 | (c) 2001 | Niklas Hallqvist | |