summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2004-11-08more monitor cleanup:Hans-Joerg Hoexer
remove dead code, some debug messages, prototype monitor_close() to void. ok ho@
2004-11-08no const for sysdep_sa_len (not yet), slipped in during previous commit...Hans-Joerg Hoexer
2004-11-08monitor cleanup: honor const, added missing inlcude, missing typecast (makesHans-Joerg Hoexer
lint happy) ok ho@
2004-11-08make lint happy and honor const.Hans-Joerg Hoexer
ok ho@
2004-10-20fix potential memleaks & small cleanup. found by patrick latifi, thanks!Hans-Joerg Hoexer
ok ho
2004-10-08pull in some changes from libc arc4random (only relevant for non-OpenBSDHans-Joerg Hoexer
systems): ansify, discard first 256 output bytes, make key schedule more arc4 stream ciper like. ok djm ho
2004-10-01add some missing $, ok djm@ 'That looks fine to me' millert@Jonathan Gray
2004-09-24Don't process NAT-T keepalives. Noted by Kamel Messaoudi. hshoexer@ okHakan Olsson
2004-09-20compile cleanly with -Wsign-compareHans-Joerg Hoexer
ok ho
2004-09-20Remove __func__Hans-Joerg Hoexer
ok ho deraadt
2004-09-17avoid signal race.Hans-Joerg Hoexer
ok ho@ otto@
2004-09-17Missing #ifdefs.Hakan Olsson
2004-09-17#include <stdlib.h> for srandom().Hakan Olsson
2004-09-17Permit next payload type NAT-OA. Noted by Kamel Messaoudi.Hakan Olsson
2004-08-23We need to set sa->initiator before checking if the newly created SAHakan Olsson
replaces an old one, or the id_i/id_r check will mismatch. Previous behaviour was mostly harmless, but wasted some resources (until normal SA expiration). hshoexer@ "haven't tried, but think it's ok"
2004-08-23Default enable DPD (Dead Peer Detection) support. hshoexer@ okHakan Olsson
2004-08-23Indent nit.Hakan Olsson
2004-08-17check for msg->isakmpg_sa being NULL before referencingHans-Joerg Hoexer
ok ho@
2004-08-14When using -K (keynote disabled), check peers' proposal against isakmpd.conf.Hans-Joerg Hoexer
ok ho@ henning@
2004-08-13extra check for no message case; ok markus, deraadt, hshoexer, henningDamien Miller
2004-08-12Fix compiler warning on alpha.Hans-Joerg Hoexer
Noted by and ok ho@
2004-08-12Avoid memleak on error (Linux/KAME). Found by Benjamin Pineau.Hakan Olsson
2004-08-10spacingTheo de Raadt
2004-08-10Better implementation of the Dead Peer Detection protocol, RFC 3706.Hakan Olsson
hshoexer@ ok.
2004-08-10Linux has AES (and DES). From Benjamin Pineau.Hakan Olsson
2004-08-10If opening /dev/arandom fails, try /dev/random. Suggested by Benjamin Pineau.Hakan Olsson
2004-08-08spacingTheo de Raadt
2004-08-03Rewrite the transport reference count code to avoid leaks.Hakan Olsson
hshoexer@ ok.
2004-08-02Do not expire unestablished phase 2 SAs on SIGHUP.Hans-Joerg Hoexer
ok ho@
2004-08-02Missed to add virtual.c here. Noted by Benjamin Pineau.Hakan Olsson
2004-07-30Style.Hakan Olsson
2004-07-29Less noise while debugging.Hakan Olsson
2004-07-29Repair NAT-T using Aggressive mode, NAT-D checks were in the wrong place.Hakan Olsson
Noted by Yvan VANHULLEBUS.
2004-07-09ansiTheo de Raadt
2004-07-08free() and close() in error path.Hans-Joerg Hoexer
ok ho@
2004-07-08typo, and line adjustment;Jason McIntyre
2004-07-07document -a/-K and "Acquire-Only"/"Use-Keynote".Hans-Joerg Hoexer
ok markus@ henning@ ho@ english polish and mdoc help and ok jmc@
2004-07-07plug memleak when receiving an INVALID_HASH_INFORMATION notify.Hans-Joerg Hoexer
Found by Patrick Latifi, thanks! ok ho@
2004-07-07compile cleanly with -Wsign-compare; while around, kill a spaceHans-Joerg Hoexer
ok ho@
2004-07-05%lu and cast to unsigned long to print a size_t; ok hoPeter Valchev
2004-06-30Compile cleanly with gcc3.3.2.Hans-Joerg Hoexer
ok ho@
2004-06-26new sentence, new line;Jason McIntyre
2004-06-26Narrow down privsep interface. Move pf_key_v2_open() to monitor.Hans-Joerg Hoexer
Work in progress. ok ho@
2004-06-26Remove -DHAVE_GETNAMEINFO frome makefiles.Ryan Thomas McBride
Pointed out by ho@
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-25Remove HAVE_GETNAMEINFO alternate code. Compiled binary is unchanged.Ryan Thomas McBride
ok msf@ hshoexer@ itojun@ ho@
2004-06-25Narrow down privsep interface. Remove ui_init to monitor. So we can get rid ofHans-Joerg Hoexer
monitor_mkfifo. Work in progress. ok ho@
2004-06-24Remove some unused code.Hans-Joerg Hoexer
Fix handling of sigchild. Now it's possible to sigstop/sigcont isakmpd correclty. ok ho@
2004-06-24Also handle keys from x509-certificates embedded in keynote credentials.Hans-Joerg Hoexer
with msf@ ok ho@
2004-06-23Print corrent prefix. Found and tested by alex at vbone.net.Hakan Olsson
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-16 00:15:41 +0000