| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2006-06-11 | Document AESCTR for quick mode and SHA2-* for main mode. Help by jmc. | Hans-Joerg Hoexer | |
| ok jmc@ | |||
| 2006-06-11 | tweaks; | Jason McIntyre | |
| 2006-06-10 | Document -S and the "Delete-SAs" tag. Those will enable SA deletion | Hans-Joerg Hoexer | |
| on shutdown. | |||
| 2006-06-10 | Make deletion of SAs on shutdown optional. The default behaviour | Hans-Joerg Hoexer | |
| now is to not delete SAs. Needed for reliable ipsec failover. Suggested by mtu@. Moreover, this ensures that packets do not leak when isakmpd is shutdown. ok mcbride@, testing mtu@ | |||
| 2006-06-10 | Allow isakmpd to use a different private rsa key per isakmp ID. Hans wrote ↵ | Mathieu Sauve-Frankel | |
| this a long time ago, I synced it to -current and tested. ok hshoexer@ | |||
| 2006-06-10 | This shouldn't have been commited yet. | Hans-Joerg Hoexer | |
| 2006-06-10 | support sha2 for main mode hmacs and aesctr for quick mode encryption. | Hans-Joerg Hoexer | |
| ok markus@ ho@ | |||
| 2006-06-09 | Allow for AH the use of the authentication algorithms added a while ago. | Christian Weisgerber | |
| Fix the indentation while we're here. ok hshoexer@ | |||
| 2006-06-02 | Big spelling cleanup, no binary change. From david@ | Hans-Joerg Hoexer | |
| 2006-06-02 | Big whitespace cleanup. | Hans-Joerg Hoexer | |
| 2006-06-01 | Fix a comment | Hans-Joerg Hoexer | |
| 2006-05-31 | tiny KNF | Hans-Joerg Hoexer | |
| 2006-05-31 | Make sure, that phase 1 SAs of active connections stay alive. Fixes a DPD | Hans-Joerg Hoexer | |
| breakage noticed and reported by Mitja Muzenic. ok markus@ ho@, testing by Mitja and cloder@, discussed with Nathanael. | |||
| 2006-05-30 | fix SA grouping. Now, esp+ah and ah+esp works again. | Hans-Joerg Hoexer | |
| ok markus@ | |||
| 2006-05-29 | Do not use C++ comments. Noticed by markus. | Hans-Joerg Hoexer | |
| 2006-05-29 | export pf_key_v2_disable_sa() (unbreaks build) | Markus Friedl | |
| 2006-05-29 | Oops, return after calling sa_release() | Ryan Thomas McBride | |
| 2006-05-29 | Fix broken merge of patch. Pointed out by nathanael at polymorpheus dot com. | Ryan Thomas McBride | |
| 2006-05-28 | Assign a finalization event to the exchange initiated on soft expiry. | Ryan Thomas McBride | |
| If the exchange fails, the existing phase 1 SA is invalidated and the exchange is retried at the Exchange-Max-Time interval until the SA hard timeout expires. Another sasyncd-related fix from nathanael at polymorpheous dot com ok ho@ hshoexer@ | |||
| 2006-05-28 | also report SA flags. | Hans-Joerg Hoexer | |
| 2006-05-28 | Change the default replay window for SAs created by the isakmpd responder | Ryan Thomas McBride | |
| to be DEFAULT_REPLAY_WINDOW instead of zero. The default replay window is then the same for both initiator and receiver. Fix from nathanael at polymorpheous dot com. ok hshoexer@ | |||
| 2006-05-27 | document modp3072. | Hans-Joerg Hoexer | |
| 2006-05-27 | add group15/modp3072 to default configurations. | Hans-Joerg Hoexer | |
| 2006-05-26 | ipsectl -> ipsecctl | Jason McIntyre | |
| 2006-05-26 | vpn.8 removal; | Jason McIntyre | |
| 2006-05-26 | let us not talk about ipsecadm and vpn anymore; ok reyk | Theo de Raadt | |
| 2006-05-05 | correct correct rfc reference | Damien Miller | |
| 2006-05-05 | correct rfc reference | Damien Miller | |
| 2006-05-04 | check for degenerate Diffie-Hellman public exponents; | Damien Miller | |
| ok markus@ hshoexer@ deraadt@ | |||
| 2006-03-22 | No need to specify the DOI, make examples more consistent. | Hans-Joerg Hoexer | |
| Suggested by david@ | |||
| 2006-03-20 | make sure the command fifo is ready before isakmpd returns. This | Hans-Joerg Hoexer | |
| resolves a startup race when interacting with ipsecctl. Suggested by and discussed with moritz@ ok moritz@ | |||
| 2006-02-02 | Small cleanup to avoid gotos, from Andrey Matveev. | Hans-Joerg Hoexer | |
| ok moritz@ | |||
| 2006-01-02 | clean up error paths using "goto", part 1. From Andrey Matveev <evol at | Hans-Joerg Hoexer | |
| online dot ptt dot ru>. Thanks! | |||
| 2005-12-28 | remove some unused functions and an unused variable found by lint. | Hans-Joerg Hoexer | |
| ok markus@ | |||
| 2005-12-21 | Userland programs should include <errno.h> not <sys/errno.h> | Todd C. Miller | |
| OK deraadt@ | |||
| 2005-12-20 | let isakmpd(8) remove it's pid/fifo file on exit. | Moritz Jodeit | |
| rework signal handling in the monitor process to let this work. testing and ok hshoexer@ | |||
| 2005-11-26 | get rid of some leftovers from a cleanup during c2k5. From Andrey Matveev | Hans-Joerg Hoexer | |
| <evol at online dot ptt dot ru>, thanks! | |||
| 2005-11-17 | typo, ok hshoexer@ | Alexander von Gernler | |
| 2005-11-17 | add a free() which got lost in r1.104. ok hshoexer@ deraadt@ | Moritz Jodeit | |
| 2005-11-16 | Avoid printing a NULL string. ok hshoexer | Chad Loder | |
| 2005-11-15 | Be cleaner about signed vs. unsigned when it's easy to do so. OK hshoexer | Chad Loder | |
| 2005-11-15 | Add a new raw2hex function and yank out several pieces of code in other | Chad Loder | |
| places that were doing this. Prodding deraadt. OK hshoexer. | |||
| 2005-11-14 | use snprintf; ok cloder. also looked at by a few other people | Theo de Raadt | |
| 2005-11-13 | zap unused variable and silence gcc. | Hans-Joerg Hoexer | |
| From Mike Belopuhov <mkb at crypt dot org dot ru> Thanks! | |||
| 2005-10-27 | Do not touch LIST_* macro internals. | Hans-Joerg Hoexer | |
| with otto@, ok ho@ | |||
| 2005-10-26 | don't send DPD messages before the exchange is finialized, otherwise | Markus Friedl | |
| we have a race between DPD and exchange timeouts and both will release the SA and corrupt the SA list. ok hshoexer@, ho@ | |||
| 2005-10-25 | some small knf, ok ho@ | Hans-Joerg Hoexer | |
| 2005-10-25 | Do not send a message when no transport is available. | Hans-Joerg Hoexer | |
| ok cloder ho | |||
| 2005-10-06 | improve examples and show how to use KEY_LENGTH. Slightly different fix than | Hans-Joerg Hoexer | |
| proposed by sthen at spacehopper dot org, fixes pr 4522, thanks! ok and with jmc@ | |||
| 2005-09-23 | Document new UI commands | Hans-Joerg Hoexer | |
| ok and help jmc@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |