summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2002-09-08Fix -pedantic errors.Hakan Olsson
2002-09-06remove Xr to photurisTheo de Raadt
2002-09-05Without IDs wait until next step/retry to handle CERTREQs. This shouldHakan Olsson
make certificate auth work better with some clients, such as SSH Sentinel.
2002-09-05Do not require the presence of subjectAltName in certificates used forHakan Olsson
IKE auth. Should make interoperating with for example FreeS/WAN easier (Pluto).
2002-09-05Do not create SAs for transaction exchanges either. By niklas@Hakan Olsson
2002-09-03add strlcpy/cat for BSD/OSMarkus Friedl
2002-09-03CPI_RESERVED_MIN is not defined on KAME+BSD/OS; ok ho@Markus Friedl
2002-08-29need CPI_xx declsJun-ichiro itojun Hagino
2002-08-29size_t has to be casted to u_long on printing.Jun-ichiro itojun Hagino
From: Martti Kuparinen <martti.kuparinen@iki.fi>
2002-08-29Work around arguably correct OpenSSL behaviour and only ask for CRLHakan Olsson
checks when we actually have CRLs to check against. Problem pointed out by <sturm@sec.informatik.tu-darmstadt.de>.
2002-08-23Initial support for MacOS X (v10.2 and later).Hakan Olsson
2002-08-23Small cleanup.Hakan Olsson
2002-08-23Another format tweakHakan Olsson
2002-08-23Proper formatHakan Olsson
2002-08-08Append to the packet log file, don't overwrite. Requested by pb@.Hakan Olsson
2002-08-07A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.Hakan Olsson
Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated.
2002-08-02Check inet_aton() failure with == 0, not == -1; millert@ ok.Aaron Campbell
2002-08-02Mention CRL support, tag and default value.Hakan Olsson
2002-08-02CRL support for isakmpd. From <Thomas.Walpuski@gmx.net> with some minorHakan Olsson
modifications by me. ok niklas@.
2002-07-16fix $OpenBSD TagMarkus Friedl
2002-07-11malloc() failure tests; rimshot@pandora.beTheo de Raadt
2002-07-09HASH payload validation does not require an exchange.Hakan Olsson
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson
2002-07-05gcc 3.1 nits. Pointed out by David Krause.Hakan Olsson
2002-07-04Do not assume we have an active exchange during payload validation.Hakan Olsson
2002-07-04styleHakan Olsson
2002-06-17A bit better. Remove debug cruft.Hakan Olsson
2002-06-15ecn_* policy attributes --- ok ho@Angelos D. Keromytis
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-14Recognize the ECN_TUNNEL attribute.Hakan Olsson
2002-06-12Rewrite for pf, plus some other small stuffHakan Olsson
2002-06-12Five higher MODP groups, but commented out for now (until IANA assignsHakan Olsson
them proper numbers).
2002-06-11Various IPComp-related modsHakan Olsson
2002-06-11set_spi: CPIs are 16 bit.Hakan Olsson
flow: accept IPComp flows.
2002-06-11Don't send KEY extensions for IPCOMP.Hakan Olsson
2002-06-11Stupid 16-bit CPI numbers.Hakan Olsson
2002-06-10CPIs cannot be selected from the same range as SPIs.Hakan Olsson
2002-06-10Zap a few remaining libkeynote refs.Hakan Olsson
2002-06-10Remove mention of dynamic loadingHakan Olsson
2002-06-10The dlopen() stuff goes away.Hakan Olsson
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-09Mark attr payload as handled. Also make sure the correct payloadHakan Olsson
length is returned.
2002-06-09Bad me. Make sure it compiles before commit.Hakan Olsson
2002-06-09CFG_REQUESTHakan Olsson
2002-06-09Style.Hakan Olsson
2002-06-09Missed this.Hakan Olsson
2002-06-09Tighten the code to work for both SET/ACK and REQ/REPLY modes.Hakan Olsson
2002-06-08Factor out hash operations, some other cleanup.Hakan Olsson
2002-06-08add cfg_typeHakan Olsson
2002-06-08a bit more for the responder casesHakan Olsson
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-27 02:55:01 +0000