Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-08-11 | Allocate slightly larger buffer for cert. | Angelos D. Keromytis | |
2001-08-02 | Let the example config use suites that actually work together. | Hakan Olsson | |
2001-07-29 | -Wunused for KAME case | Jun-ichiro itojun Hagino | |
2001-07-25 | pf_key_v2_flow: sync success and failure messages; ok niklas@ | Markus Friedl | |
2001-07-25 | CFG mode changes: send attributes of size 0 if attribute is not available | Markus Friedl | |
fix several if statements, ok ho@ | |||
2001-07-25 | do not setup identity extensions for KAME; ok angelos@ | Markus Friedl | |
2001-07-20 | we don't like: | Mike Pechkin | |
o) .Pp before/after .Sh; o) .Pp before/after .Rs/.Re; o) .Nm without argument in SYNOPSIS; | |||
2001-07-18 | protect #define MAX(); ok ho@ | Markus Friedl | |
2001-07-18 | minor updates. | Markus Friedl | |
2001-07-18 | use correct length for SADB_X_EXT_POLICY message on KAME | Markus Friedl | |
tested on bsd/os; ok ho@ | |||
2001-07-13 | Be more verbose about why X509_verify_cert() failed. Thanks to | Hakan Olsson | |
<sakane@kame.net> for pointing out X509_verify_cert_error_string(). :) | |||
2001-07-13 | Add lc_X509_verify_cert_error_string(). | Hakan Olsson | |
2001-07-11 | Return 0 on success, convert exit to return | Angelos D. Keromytis | |
2001-07-10 | (c)-2001 | Hakan Olsson | |
2001-07-10 | Rewrite packet capture to handle IPv6 addresses. | Hakan Olsson | |
2001-07-10 | htonl() for null.null_family, ok niels@, ho@ | Markus Friedl | |
2001-07-06 | style | Niklas Hallqvist | |
2001-07-06 | Style. | Hakan Olsson | |
2001-07-06 | Remove support for PF_ENCAP (deprecated since OpenBSD2.5). | Hakan Olsson | |
2001-07-06 | On second thought, we don't need this at all. | Hakan Olsson | |
2001-07-06 | Remove the .c and .h files that the build process generates. | Hakan Olsson | |
2001-07-05 | Use -W{missing,strict}-prototypes. | Hakan Olsson | |
2001-07-05 | Add prototypes and some other various cleanup. | Hakan Olsson | |
2001-07-05 | Add d2i_X509_NAME | Angelos D. Keromytis | |
2001-07-05 | Document ASN1 DN. | Angelos D. Keromytis | |
2001-07-05 | DER_ASN1_DN ID handling --- untested | Angelos D. Keromytis | |
2001-07-05 | On closer inspection, freeing the X509 names is bad. I should stop | Angelos D. Keromytis | |
coding late while half-asleep. | |||
2001-07-05 | Free X509 names in case of failure and when done. | Angelos D. Keromytis | |
2001-07-04 | Merge entries. | Angelos D. Keromytis | |
2001-07-04 | Better handling of Key IDs. | Angelos D. Keromytis | |
2001-07-04 | Some text on KEY_ID payloads. | Angelos D. Keromytis | |
2001-07-04 | Better IPv6/IPv4 integration | Niklas Hallqvist | |
2001-07-04 | IPv6 | Niklas Hallqvist | |
2001-07-03 | Fix policy information for IPv6 subnet/range cases. This is ugly, I'll | Angelos D. Keromytis | |
have to find another way of dealing with IPv6 addresses. | |||
2001-07-03 | sync set_spi with netbsd (fixes typo). | Markus Friedl | |
2001-07-03 | strlcpy->strncpy for now | Markus Friedl | |
2001-07-03 | Wait with strlcpy a while, change to strncpy. | Hakan Olsson | |
2001-07-03 | use strlcpy instead of memcpy to copy strings | Hakan Olsson | |
2001-07-03 | Slightly more verbose error messages. | Hakan Olsson | |
2001-07-02 | make the alpha happy | Theo de Raadt | |
2001-07-01 | Remove warnings from non-DDEBUG case; angelos told me. | Niklas Hallqvist | |
2001-07-01 | ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation. | Niklas Hallqvist | |
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw. | |||
2001-07-01 | strtol strictness. Style. Do not use dst end on an unconnected socket. | Niklas Hallqvist | |
This should fix the IPv6 work for this round, There has been code by ho@ too in most my recent commits, we did this on Boston Logan airport, on our way home from !c2k1, the OpenBSD hackathon. | |||
2001-07-01 | More Style police, but also sane checking of address | Niklas Hallqvist | |
family vs stated ID-type. | |||
2001-07-01 | strict strtol checking. text2sockaddr/sockaddr2text implementations | Niklas Hallqvist | |
for systems without get{addr,name}info calls. Some style police. | |||
2001-07-01 | Style | Niklas Hallqvist | |
2001-07-01 | Style police | Niklas Hallqvist | |
2001-07-01 | Regression test for isakmpd utility functions, initially just text2sockaddr. | Niklas Hallqvist | |
2001-07-01 | Start support for IPv6 addresses in policy. | Angelos D. Keromytis | |
2001-07-01 | Set size correctly for IPv6 Phase 1 IDs. | Angelos D. Keromytis | |