Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-06-20 | message_parse_payloads should accept payloads in the private range. | Hakan Olsson | |
While here, also cleanup some messages. | |||
2004-06-20 | Make the payload array in struct message dynamic, since we need to handle | Hakan Olsson | |
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls. | |||
2004-06-20 | NAT-Traversal for isakmpd. Work in progress... | Hakan Olsson | |
hshoexer@ ok. | |||
2004-06-20 | A start towards Dead Peer Detection (DPD) support, as specified in RFC 3706 | Hakan Olsson | |
2004-06-20 | Some vendors send the last Aggressive Mode message unencrypted, which we | Hakan Olsson | |
should accept. Problem noted by alex at vbone.net. hshoexer@ ok. | |||
2004-06-20 | To make debugging the unprivileged child process easier, make 'isakmpd -dd' | Hakan Olsson | |
pause just after privsep; print the PIDs and wait for SIGCONT. hshoexer@ ok | |||
2004-06-17 | Yet another bunch of memleask found and fixed by Patrick Latifi. Thanks! | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-17 | Plug a memleak. Found and fixed (and some cleanup) by Patrick Latifi. | Hans-Joerg Hoexer | |
Thanks! ok ho@ | |||
2004-06-17 | Evaluate result of X509_verify_cert() more carefully. | Hans-Joerg Hoexer | |
ok cloder@ | |||
2004-06-16 | Fix wrong pointer dereference and plug memleak. Found and patch by | Hans-Joerg Hoexer | |
Patrick Latifi. Thanks! ok ho@ | |||
2004-06-16 | fix ipv6-address and ipv6-address-mask mixup. | Hans-Joerg Hoexer | |
Found by Patrick Latifi. Thanks! ok ho@ | |||
2004-06-15 | also use MSG_AUTHENTICATED flag. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-14 | avoid stat before open | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-14 | added a missing message_free(). | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-14 | KNF, style, 80c, etc. hshoexer@ ok | Hakan Olsson | |
2004-06-11 | typo in comment | Brad Smith | |
2004-06-10 | Mark authenticated messages explicitly. Better check for authentication before | Hans-Joerg Hoexer | |
deleteing SAs. This fix is needed to solve the problems reported by Thomas Walpuski, previous diff was not sufficient. Pointed out by Thomas. Thanks! ok ho@ niklas@, testing and spellcheck by todd@ msf@ | |||
2004-06-09 | Style nits. hshoexer@ ok | Hakan Olsson | |
2004-06-09 | only accept DELETEs during an authenticated INFORMATIONAL exchange. | Hans-Joerg Hoexer | |
Fix for recent problem disclosed by Thomas Walpuski. ok ho@ | |||
2004-06-06 | Style (KNF, 80c). No binary change. | Hakan Olsson | |
2004-06-02 | remove unused BIO-functions. | Hans-Joerg Hoexer | |
ok markus@ ho@ | |||
2004-05-26 | do not leak fd on error path. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-24 | Use correct function names in log messages. Kill some spaces. | Hans-Joerg Hoexer | |
ok deraadt@ ho@ | |||
2004-05-23 | More KNF. Mainly spaces and line-wraps, no binary change. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-23 | remove excessive monitor_ prefixes | Theo de Raadt | |
2004-05-23 | stat before open is flawed | Theo de Raadt | |
2004-05-23 | greater care with arguments | Theo de Raadt | |
2004-05-19 | Permit symbolic protocol and service names, such as "Protocol= tcp", in the | Hakan Olsson | |
<IPsec-ID> sections. hshoexer@ ok | |||
2004-05-14 | Some more KNF, no binary change. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-13 | Extensions to the FIFO interface: | Hakan Olsson | |
"C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok. | |||
2004-05-10 | 64bit gcc saw missing cast | Theo de Raadt | |
2004-05-06 | KNF cleanup. hshoexer@ ok | Hakan Olsson | |
2004-05-06 | Obsolete. jakob@ ok. | Hakan Olsson | |
2004-05-03 | KNF. ok ho@ | Hans-Joerg Hoexer | |
2004-04-29 | Better checking of minimum payload lengths. Drop out safely when an unknown | Hans-Joerg Hoexer | |
payload type is encountered. While around, do some KNF. ok ho@ | |||
2004-04-28 | remove unused variable and shorten names of two other. Removed some spaces | Hans-Joerg Hoexer | |
while around. ok ho@ markus@ | |||
2004-04-28 | Reserve some payload numbers for RFC 3547 and the earlier NAT-T drafts. ↵ | Hakan Olsson | |
hshoexer@ ok. | |||
2004-04-23 | Make sure KEY_LENGTH attribute is present when checking AES proposals, | Hakan Olsson | |
required when acting as responder to SafeNet peers. Also make conf_load_defaults() readable again (KNF). hshoexer@ ok. | |||
2004-04-15 | more knf; ok hshoexer | Theo de Raadt | |
2004-04-15 | knf | Theo de Raadt | |
2004-04-15 | partial move to KNF. More to come. This has happened because there | Theo de Raadt | |
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer | |||
2004-04-15 | spaces | Theo de Raadt | |
2004-04-13 | Add missing #include. Found by Stefan Paletta. | Hans-Joerg Hoexer | |
ok henning@ ho@ | |||
2004-04-08 | swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSD | Henning Brauer | |
and NetBSD do. ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@ | |||
2004-04-08 | Set timezone before privsep, child uses now correct timezone. | Hans-Joerg Hoexer | |
Noticed by david@ ok ho@ david@ | |||
2004-04-07 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |
2004-04-07 | Reset *data in case of unknown key types | Hakan Olsson | |
2004-04-07 | -Wmissing-declarations | Hakan Olsson | |
2004-04-07 | More careful when walking LIST queues. hshoexer@, david@ ok. | Hakan Olsson | |
2004-03-31 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |