summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2000-10-16Merge with EOM 1.135Niklas Hallqvist
author: provos better referencing. okay niklas@ author: angelos Eliminate bogus freeing of static variable.
2000-10-16Merge with EOM 1.44Niklas Hallqvist
author: angelos Just to be on the safe side, use a struct stat. author: angelos Only do the secrecy check and parse the configuration file if it actually exists. author: angelos Actually create all the pre-configured Transforms and Suites, even if the user doesn't actually define them in the configuration file; ugly kludge, but it allows use of isakmpd without a configuration file. author: angelos Add RIPEMD negotiation/configuration.
2000-10-16Merge with EOM 1.48Niklas Hallqvist
author: angelos Fix comment. author: angelos Add RIPEMD negotiation/configuration.
2000-10-16Merge with EOM 1.78Niklas Hallqvist
author: niklas correct test for GMP feature
2000-10-16Merge with EOM 1.52Niklas Hallqvist
author: niklas heh, backspace as a continuation character, yeah right! author: angelos Mention Remote-ID tag in ISAKMP-peer section, and also that it doesn't currently work. author: angelos It's "Local-address", not "Listen-address" in the ISAKMP-peer section. author: angelos Mention RIPEMD.
2000-10-16Merge with EOM 1.9Niklas Hallqvist
author: angelos Correct byte-order handling in encode/decode_128, add function prototypes.
2000-10-16Merge with EOM 1.12Niklas Hallqvist
author: niklas missed some FEATURES-dependencies in the last commit author: niklas include crypto headers based on FEATURES
2000-10-16ipsec_num.cst: Merge with EOM 1.5Niklas Hallqvist
isakmpd.policy.5: Merge with EOM 1.22 author: angelos Add RIPEMD negotiation/configuration.
2000-10-16Merge with EOM 1.110Niklas Hallqvist
author: provos better referencing. okay niklas@ author: niklas Allow new and old style configuration simultaneously
2000-10-16Merge with EOM 1.134Niklas Hallqvist
author: provos better referencing. okay niklas@
2000-10-16Merge with EOM 1.52Niklas Hallqvist
author: niklas ifdef HAVE_GETNAMINFO author: angelos That comment doesn't justify an XXX mark :-)
2000-10-16Merge with EOM 1.29Niklas Hallqvist
author: angelos Add comment on where we could be checking the Remote-ID.
2000-10-16Merge with EOM 1.19Niklas Hallqvist
author: angelos Correct byte-order handling in encode/decode_128, add function prototypes. author: angelos A few more auxiliary routines.
2000-10-16Merge with EOM 1.1Niklas Hallqvist
author: niklas Add weak aliases for keynote symbols that have not always been there
2000-10-16Merge with EOM 1.16Niklas Hallqvist
author: niklas conditionalize getnaminfo and add weak keynote syms author: niklas Add weak aliases for keynote symbols that have not always been there
2000-10-16Merge with EOM 1.139Niklas Hallqvist
author: niklas Allow new and old style configuration simultaneously author: niklas use snprintf instead of strlcpy since it is more backwards compatible author: niklas Provide NI_MAXHOSTS for systems who do not have it author: niklas conditionalize getnaminfo and be a style pedant author: angelos Fix bounds checking for transforms to include AES (noticed by mickey@) author: angelos Add RIPEMD negotiation/configuration.
2000-10-16Merge with EOM 1.59Niklas Hallqvist
author: provos better referencing. okay niklas@ author: niklas Name collissions introduced by me, DOH! author: niklas Allow new and old style configuration simultaneously author: niklas Backward compatibility with old style configuration author: niklas remove redundant ifdefs author: niklas facistoid style and naming pedantery author: angelos Construct the ISAKMP-peer section such that it actually contains the src/dst Phase 1 IDs (so we don't have to worry about configuration conflicts). I should update the manpage.... author: angelos Use local-address, not listen-address. author: angelos First cut of ACQUIRE handling, fully functional but not entirely dynamic (it depends on the pre-defined Transforms and Suites). Nonetheless, it is possible to use isakmpd without a configuration file when using certificates for authentication. author: angelos Add RIPEMD negotiation/configuration.
2000-10-13util.h: Merge with EOM 1.8Niklas Hallqvist
ike_auth.c: Merge with EOM 1.57 author: ho Add file permission check to private key file. Split out check function to util.c.
2000-10-13regress/b2n/Makefile: Merge with EOM 1.12Niklas Hallqvist
regress/ec2n/Makefile: Merge with EOM 1.9 conf.c: Merge with EOM 1.40 util.c: Merge with EOM 1.17 author: ho Add file permission check to private key file. Split out check function to util.c.
2000-10-13Merge with EOM 1.39Niklas Hallqvist
author: ho Revert. Be strict about file mode.
2000-10-13Merge with EOM 1.38Niklas Hallqvist
author: ho Warn but continue on isakmpd.conf permissions.
2000-10-10Merge with EOM 1.58Niklas Hallqvist
author: provos increase size of refcnt. okay niklas@
2000-10-10message.c: Merge with EOM 1.156Niklas Hallqvist
message.h: Merge with EOM 1.51 transport.c: Merge with EOM 1.43 author: provos use message_send_expire for timeouts. okay niklas@
2000-10-10Merge with EOM 1.49Niklas Hallqvist
author: niklas Very ugly, transient fix so isakmpd works in a backward compatible way, instead of requiring the new undocumented ACQUIRE-based setup
2000-10-09samples/VPN-3way-template.conf: Merge with EOM 1.8Niklas Hallqvist
samples/VPN-east.conf: Merge with EOM 1.12 samples/VPN-west.conf: Merge with EOM 1.13 samples/policy: Merge with EOM 1.6 samples/singlehost-west.conf: Merge with EOM 1.9 samples/singlehost-east.conf: Merge with EOM 1.9 conf.c: Merge with EOM 1.37 ipsec.c: Merge with EOM 1.133 ipsec_num.cst: Merge with EOM 1.4 isakmpd.conf.5: Merge with EOM 1.48 isakmpd.policy.5: Merge with EOM 1.21 policy.c: Merge with EOM 1.46 author: angelos AES support.
2000-10-09Merge with EOM 1.133Niklas Hallqvist
author: angelos Use Default entry for Phase 1 configuration if none is found.
2000-10-09Merge with EOM 1.48Niklas Hallqvist
author: niklas properly ifdef PF_KEY extension author: angelos AES support.
2000-10-07Merge with EOM 1.133Niklas Hallqvist
author: niklas style and < that should be <= author: angelos If the initiator does not propose a Phase 2 ID, use the local/peer addresses as implicit IDs; this was supported on the responder side, but weirdly enough not on the initiator. Reported by itojun@ author: angelos Handle 32-bit lifetimes (in generating them). author: ho (c)-2000 author: provos style as pointed out by the code style pedant. author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07Merge with EOM 1.56Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: angelos No need to delete SPIs, they'll just expire. author: provos style as pointed out by the code style pedant.
2000-10-07Merge with EOM 1.16Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: ho Read in FEATURES for proper operation author: angelos No need for NODEBUG. author: angelos Use NODEBUG compile flag, so policy.c doesn't barf.
2000-10-07Merge with EOM 1.4Niklas Hallqvist
author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...>
2000-10-07Merge with EOM 1.43Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: provos style as pointed out by the code style pedant. author: ho Compile without USE_KEYNOTE/USE_POLICY.
2000-10-07Merge with EOM 1.155Niklas Hallqvist
author: niklas style author: niklas spelling author: ho (c)-2000 author: niklas style author: provos fail if exchange can not be created author: angelos Invalid payload may be because of passphrase mismatch, so warn about that. author: provos reference to freed object, move free down author: ho log_debug -> LOG_DBG (USE_DEBUG) author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07conf.h: Merge with EOM 1.13Niklas Hallqvist
gmp_util.c: Merge with EOM 1.7 isakmpd.conf.5: Merge with EOM 1.47 author: ho (c)-2000
2000-10-07Merge with EOM 1.45Niklas Hallqvist
author: angelos Unsigned integers for most attributes. author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...> author: angelos Typo on checking esp lifetimes. author: angelos Use the correct protocol from the IDi/IDr.
2000-10-07Merge with EOM 1.28Niklas Hallqvist
author: niklas Obsolete commentary
2000-10-07Merge with EOM 1.16Niklas Hallqvist
author: itojun need string.h for netbsd/alpha
2000-10-07Merge with EOM 1.14Niklas Hallqvist
author: ho Add USE_KEYNOTE if policy feature is active
2000-10-07Merge with EOM 1.42Niklas Hallqvist
author: ho ipsec_decode_ids is only used with USE_DEBUG
2000-10-07Merge with EOM 1.16Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...>
2000-10-07Merge with EOM 1.36Niklas Hallqvist
author: niklas Remove some spaces author: niklas do not crash on empty config files author: ho (c)-2000 author: provos style as pointed out by the code style pedant. author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07Merge with EOM 1.9Niklas Hallqvist
author: niklas Style author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...>
2000-10-07Merge with EOM 1.132Niklas Hallqvist
author: niklas style author: angelos Make sure the LIFE_DURATION length is 2 or 4 bytes (we don't handle anything else, although we could extend it to handle anything up to 8 bytes). author: provos dont crash when isakmp sa keystate = 0; happens when encountering high packet loss. author: ho ipsec_decode_ids is only used with USE_DEBUG author: provos style as pointed out by the code style pedant. author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07isakmp_doi.h: Merge with EOM 1.1Niklas Hallqvist
isakmpd.c: Merge with EOM 1.54
2000-10-07Merge with EOM 1.30Niklas Hallqvist
author: niklas no need for sysdep.h in here. This promotes reuse of the log module in other environments author: ho (c)-2000
2000-10-07Merge with EOM 1.26Niklas Hallqvist
author: ho pconn variable only used with USE_DEBUG author: ho NetBSD wants <sys/socket.h> for AF_INET def.
2000-10-07Merge with EOM 1.28Niklas Hallqvist
author: niklas style and < that should be <= author: angelos Handle 32-bit lifetimes (in generating them). author: ho Use log_print() instead of log_error here, no errno here.
2000-10-07Merge with EOM 1.46Niklas Hallqvist
author: niklas style author: angelos No reserved1 field anymore. author: angelos Begining of ACQUIRE support. author: angelos No need to delete SPIs, they'll just expire. author: angelos Only play with flows if we're using the "old" IPsec code (the new kernel code to be committed).
2000-10-07Merge with EOM 1.132Niklas Hallqvist
author: niklas style author: ho (c)-2000 author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07Merge with EOM 1.42Niklas Hallqvist
author: provos remove previous timeout if adding a new one
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-06 18:14:21 +0000