| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2005-04-08 | get rid of sysdep_sa_len | Hans-Joerg Hoexer | |
| ok cloder@ | |||
| 2005-04-08 | Make deterministic randomness (only ever used for testing) a compile-time | Chad Loder | |
| option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer | |||
| 2005-04-08 | keynote and policy always compiled in | Theo de Raadt | |
| 2005-04-08 | always enable aggressive, dpd, and isakmp_cfg | Theo de Raadt | |
| 2005-04-08 | nat-traversal always | Theo de Raadt | |
| 2005-04-06 | knf, ok cloder | Theo de Raadt | |
| 2005-04-06 | Always print transport information correctly. | Chad Loder | |
| OK deraadt@ | |||
| 2005-04-04 | spacing; ok cloder | Theo de Raadt | |
| 2005-02-27 | where possible, use bzero instead of memset | Hans-Joerg Hoexer | |
| ok cloder henning | |||
| 2005-02-24 | disable the SA dpd timer on sa_free(). this avoid a race | Markus Friedl | |
| between DPD and initial contact (double free); ok hshoexer | |||
| 2005-02-16 | On shutdown also send delete messages for isakmp SAs. | Hans-Joerg Hoexer | |
| ok ho | |||
| 2005-01-30 | Avoid null pointer dereference when deleting not fully established SAs. | Hans-Joerg Hoexer | |
| ok ho@ | |||
| 2004-08-10 | Better implementation of the Dead Peer Detection protocol, RFC 3706. | Hakan Olsson | |
| hshoexer@ ok. | |||
| 2004-08-08 | spacing | Theo de Raadt | |
| 2004-08-02 | Do not expire unestablished phase 2 SAs on SIGHUP. | Hans-Joerg Hoexer | |
| ok ho@ | |||
| 2004-06-21 | Implement NAT-T keepalive messages. | Hakan Olsson | |
| 2004-05-23 | More KNF. Mainly spaces and line-wraps, no binary change. | Hans-Joerg Hoexer | |
| ok ho@ | |||
| 2004-05-13 | Extensions to the FIFO interface: | Hakan Olsson | |
| "C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok. | |||
| 2004-04-15 | partial move to KNF. More to come. This has happened because there | Theo de Raadt | |
| are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer | |||
| 2004-04-07 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |
| 2004-04-07 | More careful when walking LIST queues. hshoexer@, david@ ok. | Hakan Olsson | |
| 2004-03-19 | Add missing bits to make already present privsep code work. Enable privsep. | Hans-Joerg Hoexer | |
| ok ho@ deraadt@ markus@ | |||
| 2004-02-27 | (C)-2004 | Hakan Olsson | |
| 2004-02-27 | Follow RFC 2408 more closely regarding how to better check the proposal | Hakan Olsson | |
| returned by the other peer (the responder). Some implementations (notably the Cisco PIX) does not follow a SHOULD in section 4.2 of the RFC. With certain proposal combinations this caused us to setup the wrong SA resulting in us being unable to process incoming IPsec traffic (over this tunnel). Tested against a number of different IKE implementations. hshoexer@ ok. | |||
| 2004-01-06 | small typos fixed. | Hans-Joerg Hoexer | |
| ok markus@ | |||
| 2003-07-25 | add sha2 support; ok ho@ | Markus Friedl | |
| 2003-06-04 | Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos | Hakan Olsson | |
| D. Keromytis and Niels Provos. | |||
| 2003-06-03 | Cleanup. Use 'sizeof variable' instead of magic constants. | Hakan Olsson | |
| 2003-05-18 | Add a debug message to sa_reinit() to indicate when we renegotiate | Hakan Olsson | |
| active connections. | |||
| 2003-05-16 | If the "Renegotiate-on-HUP" tag is defined in the [General] section, a | Hakan Olsson | |
| HUP signal (or "R" to the FIFO) will also renegotiate all Phase 2 SAs, i.e all connections. ok niklas@, tested and ok kjell@. | |||
| 2003-05-15 | Cleanup. Do not store the private key in either the exchange or sa structs. | Hakan Olsson | |
| 2003-05-14 | I did not test this enough. Unbreak. | Hakan Olsson | |
| 2003-05-12 | AES -> AES_128_CBC | Hakan Olsson | |
| 2002-11-21 | -Wshadow nits. | Hakan Olsson | |
| 2002-09-08 | Fix -pedantic errors. | Hakan Olsson | |
| 2002-06-10 | The dlopen() stuff goes away. | Hakan Olsson | |
| 2002-06-09 | rm trailing whitespace | Todd T. Fries | |
| 2002-06-07 | typo | Hakan Olsson | |
| 2002-06-07 | Add 'ikecfg' as a valid Flags= value. | Hakan Olsson | |
| 2002-06-06 | style | Hakan Olsson | |
| 2002-06-06 | Style, and a few additional format/type mods. | Hakan Olsson | |
| 2002-06-01 | size_t must be cast to (unsigned long) and printed using %lu | Theo de Raadt | |
| 2002-05-28 | Proper types in format strings. From <greg@nest.cx> | Hakan Olsson | |
| 2002-05-23 | One last sprintf -> snprintf, requested by deraadt. | Hakan Olsson | |
| 2002-03-17 | Move SA_FILE definition to sa.h. | Angelos D. Keromytis | |
| 2002-03-17 | Add 'T' and 'S' commands (for tearing-down and reporting all Phase 2 | Angelos D. Keromytis | |
| SAs), from bdallen@nps.navy.mil | |||
| 2002-01-25 | no static for sa_dump, explicit log cls/level | Hakan Olsson | |
| 2001-11-21 | %qd -> %llu in a couple of other places | Hakan Olsson | |
| 2001-11-21 | Have sa_dump() also print SA lifetimes (for /var/run/isakmpd.report). | Hakan Olsson | |
| 2001-10-26 | Change to use sysdep_sa_len() function. | Hakan Olsson | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |