summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/x509.c
AgeCommit message (Expand)Author
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2014-05-01Correct a test for X509_get_notAfter() failing or returningJonathan Gray
2014-03-07If allocation of 'id' fails, don't try to deref it after 'goto fail'.Gerhard Roth
2013-11-14fix parameter types for x509 routinesTheo de Raadt
2013-10-27If a constant string needs a name, use a static const array instead of aPhilip Guenther
2010-06-29Replace the hand-crafted Diffie-Hellman implementation in isakmpd withReyk Floeter
2008-09-06adapt to API changes in OpenSSL 0.9.8hDamien Miller
2007-09-02use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsgTheo de Raadt
2007-08-05Allow key exchange with RSA signature authentication to work withTom Cosgrove
2007-04-16There's no point in checking ptr for NULL before doing free(ptr)Moritz Jodeit
2007-03-03There may be more than one item in the subjectAltName (cropping upTom Cosgrove
2006-09-19Use S_IS* macros insted of masking with S_IF* flags. The latter mayOtto Moerbeek
2006-06-02Big spelling cleanup, no binary change. From david@Hans-Joerg Hoexer
2005-11-15Add a new raw2hex function and yank out several pieces of code in otherChad Loder
2005-11-14use snprintf; ok cloder. also looked at by a few other peopleTheo de Raadt
2005-05-28introduce new readdir implementation for the monitor.Moritz Jodeit
2005-05-26Clean up some cleanup code. Fixes at least one leak, possibly more.Chad Loder
2005-04-08Make deterministic randomness (only ever used for testing) a compile-timeChad Loder
2005-04-08keynote and policy always compiled inTheo de Raadt
2005-04-08privsep alwaysTheo de Raadt
2005-04-05Always compile X509 support. Almost everyone uses it. Makes the codeChad Loder
2005-03-15small log message fix.Marco Pfatschbacher
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
2004-08-10spacingTheo de Raadt
2004-08-08spacingTheo de Raadt
2004-06-17Evaluate result of X509_verify_cert() more carefully.Hans-Joerg Hoexer
2004-06-14avoid stat before openHans-Joerg Hoexer
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-02remove unused BIO-functions.Hans-Joerg Hoexer
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
2004-04-07-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-03-19Add missing bits to make already present privsep code work. Enable privsep.Hans-Joerg Hoexer
2004-01-06Remove redundant test for file types. Noted by Stefan Paletta.Hans-Joerg Hoexer
2003-11-07adress -> address, and a few more; all from Jonathon Gray;Jason McIntyre
2003-11-06Style nits.Hakan Olsson
2003-06-10boring cleanupsTheo de Raadt
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
2003-06-03Cleanup. Use 'sizeof variable' instead of magic constants.Hakan Olsson
2003-04-09Less noise for missing crl dir, demoted to debug message.Hakan Olsson
2002-12-03LOG_DBG for missing ca/, certs/, crls/ dirs, notHakan Olsson
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-09-05Do not require the presence of subjectAltName in certificates used forHakan Olsson
2002-08-29Work around arguably correct OpenSSL behaviour and only ask for CRLHakan Olsson
2002-08-07A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.Hakan Olsson
2002-08-02CRL support for isakmpd. From <Thomas.Walpuski@gmx.net> with some minorHakan Olsson
2002-06-10Zap a few remaining libkeynote refs.Hakan Olsson
2002-06-10The dlopen() stuff goes away.Hakan Olsson
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-03-06Fix a couple of snprintf length bugs. Same problem <chris@stallion.oz.au>Hakan Olsson