summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Expand)Author
2023-12-20Don't unset the SA tag set by ipsec_sa_tag in ipsec_sa_iface.Tobias Heider
2023-08-08have a go at documenting the Interface config statement.David Gwynne
2023-08-07support configuring interface SAs for route-based ipsec vpns.David Gwynne
2023-03-31Add missing NULL check after group_get()Theo Buehler
2023-03-31Guard use of GROUP_EC2N with #ifndef OPENSSL_NO_EC2MTheo Buehler
2023-03-28Avoid double free in isakmpdTheo Buehler
2023-03-08Delete obsolete /* ARGSUSED */ lint comments.Philip Guenther
2023-02-08isakmpd: add missing void to a function definitionTheo Buehler
2022-12-04userspace: remove vestigial '?' cases from top-level getopt(3) loopsScott Soule Cheloha
2022-03-31man pages: add missing commas between subordinate and main clausesChristian Weisgerber
2022-02-06remove please from manual pagesJonathan Gray
2022-01-31In isakmpd's pf_key_v2_enable_sa(), check if proto is NULL and if so,Stuart Henderson
2022-01-28When it's the possessive of 'it', it's spelled "its", without thePhilip Guenther
2022-01-16isakmpd: fix -Wunused-but-set-variable warningsChristian Weisgerber
2022-01-14isakmpd: convert modp to opaque DHTheo Buehler
2021-11-30isakmpd: convert modp_init() for opaque DH.Theo Buehler
2021-11-29the code in this file has reason to include any sys/*.h header files,Theo de Raadt
2021-11-19isakmpd: stop reaching into EVP_PKEY.Theo Buehler
2021-11-03Clarify that ANY can be used for several parameters of IPsec transform.YASUOKA Masahiko
2021-10-31Now that X509_OBJECT is opaque, we need to allocate it on the heapTheo Buehler
2021-10-24For open/openat, if the flags parameter does not contain O_CREAT, theTheo de Raadt
2021-10-22remove some bad punctuation;Jason McIntyre
2021-10-22After deleting hifn(4) the only provider for the LZS compressionAlexander Bluhm
2021-10-21isakmpd: prepare for opaque X509_STORE_CTX struct.Theo Buehler
2021-10-21isakmpd: prepare for opaque X509_EXTENSION struct. This needs to useTheo Buehler
2021-10-13isakmpd: remove #ifdefs for ancient OPENSSL_VERSIONs.Theo Buehler
2021-10-13isakmpd: remove libcrypto.cTheo Buehler
2021-10-09delete unneccessary arpa/nameser.h includesTheo de Raadt
2021-07-02call the API function X509_NAME_cmp(3) instead of the obsolete,Ingo Schwarze
2021-05-13Use field independent versions of {get,set}_coordinates()Theo Buehler
2021-02-11Link isakmpd dynamically. Mount /usr on NFS via IPsec does notAlexander Bluhm
2021-01-28Extern transport_list. Fixed compilation with -fno-common.mortimer
2020-07-07Fix shared DH secret length in log message.tobhe
2020-01-24Fix isakmpd monitor process to use the exit status of main processYASUOKA Masahiko
2019-12-19The previous fix for creating isakmpd(8) IKE pcap file, weakenedAlexander Bluhm
2019-12-10If a file or directory component does not exists, realpath(3) returnsAlexander Bluhm
2019-11-29Change the default security level for incoming IPsec flows fromtobhe
2019-11-14Do not print misleading error message about permission error forAlexander Bluhm
2019-08-30mop up for the pcap.3 rename;Jason McIntyre
2019-07-03snprintf/vsnprintf return < 0 on error, rather than -1.Theo de Raadt
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-02-19oops, bad Pp snuck in;Jason McIntyre
2019-02-18Rework the certificate generation examples a bit:Stuart Henderson
2019-01-22PF_ROUTE -> AF_ROUTE in the scattered sock()/setsockopt() callsKenneth R Westerback
2018-09-20add missing braces implied by indentationJonathan Gray
2018-04-17Document how to avoid isakmpd(8) source IP address pitfalls by usingStefan Sperling
2018-01-15Spacing, no object change.Martin Pieuchot
2018-01-04space -> tabMartin Pieuchot
2017-12-07Set the correct ENCAPSULATION_MODE when doing NAT-T.Martin Pieuchot
2017-12-05Use clock_gettime(CLOCK_MONOTONIC) to schedule timersJeremie Courreges-Anglas