summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2004-06-20message_parse_payloads should accept payloads in the private range.Hakan Olsson
While here, also cleanup some messages.
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA. Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.
2004-06-20NAT-Traversal for isakmpd. Work in progress...Hakan Olsson
hshoexer@ ok.
2004-06-20A start towards Dead Peer Detection (DPD) support, as specified in RFC 3706Hakan Olsson
2004-06-20Some vendors send the last Aggressive Mode message unencrypted, which weHakan Olsson
should accept. Problem noted by alex at vbone.net. hshoexer@ ok.
2004-06-20To make debugging the unprivileged child process easier, make 'isakmpd -dd'Hakan Olsson
pause just after privsep; print the PIDs and wait for SIGCONT. hshoexer@ ok
2004-06-17Yet another bunch of memleask found and fixed by Patrick Latifi. Thanks!Hans-Joerg Hoexer
ok ho@
2004-06-17Plug a memleak. Found and fixed (and some cleanup) by Patrick Latifi.Hans-Joerg Hoexer
Thanks! ok ho@
2004-06-17Evaluate result of X509_verify_cert() more carefully.Hans-Joerg Hoexer
ok cloder@
2004-06-16Fix wrong pointer dereference and plug memleak. Found and patch byHans-Joerg Hoexer
Patrick Latifi. Thanks! ok ho@
2004-06-16fix ipv6-address and ipv6-address-mask mixup.Hans-Joerg Hoexer
Found by Patrick Latifi. Thanks! ok ho@
2004-06-15also use MSG_AUTHENTICATED flag.Hans-Joerg Hoexer
ok ho@
2004-06-14avoid stat before openHans-Joerg Hoexer
ok ho@
2004-06-14added a missing message_free().Hans-Joerg Hoexer
ok ho@
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-11typo in commentBrad Smith
2004-06-10Mark authenticated messages explicitly. Better check for authentication beforeHans-Joerg Hoexer
deleteing SAs. This fix is needed to solve the problems reported by Thomas Walpuski, previous diff was not sufficient. Pointed out by Thomas. Thanks! ok ho@ niklas@, testing and spellcheck by todd@ msf@
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-06-09only accept DELETEs during an authenticated INFORMATIONAL exchange.Hans-Joerg Hoexer
Fix for recent problem disclosed by Thomas Walpuski. ok ho@
2004-06-06Style (KNF, 80c). No binary change.Hakan Olsson
2004-06-02remove unused BIO-functions.Hans-Joerg Hoexer
ok markus@ ho@
2004-05-26do not leak fd on error path.Hans-Joerg Hoexer
ok ho@
2004-05-24Use correct function names in log messages. Kill some spaces.Hans-Joerg Hoexer
ok deraadt@ ho@
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-23remove excessive monitor_ prefixesTheo de Raadt
2004-05-23stat before open is flawedTheo de Raadt
2004-05-23greater care with argumentsTheo de Raadt
2004-05-19Permit symbolic protocol and service names, such as "Protocol= tcp", in theHakan Olsson
<IPsec-ID> sections. hshoexer@ ok
2004-05-14Some more KNF, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-13Extensions to the FIFO interface:Hakan Olsson
"C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok.
2004-05-1064bit gcc saw missing castTheo de Raadt
2004-05-06KNF cleanup. hshoexer@ okHakan Olsson
2004-05-06Obsolete. jakob@ ok.Hakan Olsson
2004-05-03KNF. ok ho@Hans-Joerg Hoexer
2004-04-29Better checking of minimum payload lengths. Drop out safely when an unknownHans-Joerg Hoexer
payload type is encountered. While around, do some KNF. ok ho@
2004-04-28remove unused variable and shorten names of two other. Removed some spacesHans-Joerg Hoexer
while around. ok ho@ markus@
2004-04-28Reserve some payload numbers for RFC 3547 and the earlier NAT-T drafts. ↵Hakan Olsson
hshoexer@ ok.
2004-04-23Make sure KEY_LENGTH attribute is present when checking AES proposals,Hakan Olsson
required when acting as responder to SafeNet peers. Also make conf_load_defaults() readable again (KNF). hshoexer@ ok.
2004-04-15more knf; ok hshoexerTheo de Raadt
2004-04-15knfTheo de Raadt
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-04-15spacesTheo de Raadt
2004-04-13Add missing #include. Found by Stefan Paletta.Hans-Joerg Hoexer
ok henning@ ho@
2004-04-08swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSDHenning Brauer
and NetBSD do. ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@
2004-04-08Set timezone before privsep, child uses now correct timezone.Hans-Joerg Hoexer
Noticed by david@ ok ho@ david@
2004-04-07-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-04-07Reset *data in case of unknown key typesHakan Olsson
2004-04-07-Wmissing-declarationsHakan Olsson
2004-04-07More careful when walking LIST queues. hshoexer@, david@ ok.Hakan Olsson
2004-03-31-Wsign-compare nits. hshoexer@ ok.Hakan Olsson