summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2005-01-29some knf and space killing, no binary change.Hans-Joerg Hoexer
2005-01-29Handle some pointers more carefully. From pat@ some while ago.Hans-Joerg Hoexer
ok ho@
2005-01-05kill whitespace;Jason McIntyre
2005-01-05Discourage using aggressive mode.Hans-Joerg Hoexer
ok and some help ho@
2004-12-28proper portable C; ok hshoexerTheo de Raadt
2004-12-28Correctly determine length of rsa key passed by the kernel to userland. FoundHans-Joerg Hoexer
and fix provided by Stefan Miltchev. Again, many thanks! Slightly different fix. ok ho@
2004-12-27Fix broken pointer arithmetic when receiving a RSA key from the kernel. FoundHans-Joerg Hoexer
and fix provided by Stefan Miltchev. Thanks! ok otto@
2004-12-22Fix parenthesis mismatch, from Stefan Miltchev. Thanks!Hans-Joerg Hoexer
While around, zap some spaces ok markus@
2004-12-14Reword comment a bit for clarity. hshoexer@ ok.Hakan Olsson
2004-12-14Allow the Address, Network, or Netmask values of the <IPsec-ID> to beRyan Thomas McBride
specified with an interface name (in which case the first address is used) or the keyword 'default' (in which case the address is selected based on the default route). eg: [roadwarrior-ip] ID-type= IPV4_ADDR Address= default ok ho@ hshoexer@
2004-12-13make sure the isakmpd_s has id_r/s set; ok hshoexer, hoMarkus Friedl
2004-12-10check msg->isakmp_sa != NULL before the transport gets updated; ok hshoexerMarkus Friedl
2004-12-081. allow up to DPD_RETRANS_MAX retransmitted R_U_THERE messages.Markus Friedl
2. reset dpd_failcount when switching to DPD_TIMER_NORMAL. 3. ignore DPD timeouts on SAs that are marked SA_FLAG_REPLACED. ok hshoexer, ho
2004-12-08NAT/T: replace the isakmpd SA transport with the transport from theMarkus Friedl
message (only during phase 1). this avoids DPD messages to the 'wrong' port. ok hshoexer
2004-12-06RFC2409 mandates min and max nonce lengths. hshoexer@ ok.Hakan Olsson
2004-11-29Spell precede correctly.Jonathan Gray
'looks fine' millert@, krw@. ok jmc@
2004-11-18use hash and not hmac to calculate NAT-D payloads. Also add NAT-D payload forHans-Joerg Hoexer
the destination address first. Remove support for obsolete V1 NAT-T. This fixes interoperability problems with non-openbsd isakmpd implementations. "looks good" ho@, ok markus@ for hash/hmac testing by various people (thanks!)
2004-11-10Use ${STATIC} rather than -static (dont hardcode). ok miod@Dale Rahn
2004-11-08rename char array realpath to pathreal to avoid naming conflict withHans-Joerg Hoexer
realpath(3); makes lint a bit happier ok ho@
2004-11-08more monitor cleanup:Hans-Joerg Hoexer
remove dead code, some debug messages, prototype monitor_close() to void. ok ho@
2004-11-08no const for sysdep_sa_len (not yet), slipped in during previous commit...Hans-Joerg Hoexer
2004-11-08monitor cleanup: honor const, added missing inlcude, missing typecast (makesHans-Joerg Hoexer
lint happy) ok ho@
2004-11-08make lint happy and honor const.Hans-Joerg Hoexer
ok ho@
2004-10-20fix potential memleaks & small cleanup. found by patrick latifi, thanks!Hans-Joerg Hoexer
ok ho
2004-10-08pull in some changes from libc arc4random (only relevant for non-OpenBSDHans-Joerg Hoexer
systems): ansify, discard first 256 output bytes, make key schedule more arc4 stream ciper like. ok djm ho
2004-10-01add some missing $, ok djm@ 'That looks fine to me' millert@Jonathan Gray
2004-09-24Don't process NAT-T keepalives. Noted by Kamel Messaoudi. hshoexer@ okHakan Olsson
2004-09-20compile cleanly with -Wsign-compareHans-Joerg Hoexer
ok ho
2004-09-20Remove __func__Hans-Joerg Hoexer
ok ho deraadt
2004-09-17avoid signal race.Hans-Joerg Hoexer
ok ho@ otto@
2004-09-17Missing #ifdefs.Hakan Olsson
2004-09-17#include <stdlib.h> for srandom().Hakan Olsson
2004-09-17Permit next payload type NAT-OA. Noted by Kamel Messaoudi.Hakan Olsson
2004-08-23We need to set sa->initiator before checking if the newly created SAHakan Olsson
replaces an old one, or the id_i/id_r check will mismatch. Previous behaviour was mostly harmless, but wasted some resources (until normal SA expiration). hshoexer@ "haven't tried, but think it's ok"
2004-08-23Default enable DPD (Dead Peer Detection) support. hshoexer@ okHakan Olsson
2004-08-23Indent nit.Hakan Olsson
2004-08-17check for msg->isakmpg_sa being NULL before referencingHans-Joerg Hoexer
ok ho@
2004-08-14When using -K (keynote disabled), check peers' proposal against isakmpd.conf.Hans-Joerg Hoexer
ok ho@ henning@
2004-08-13extra check for no message case; ok markus, deraadt, hshoexer, henningDamien Miller
2004-08-12Fix compiler warning on alpha.Hans-Joerg Hoexer
Noted by and ok ho@
2004-08-12Avoid memleak on error (Linux/KAME). Found by Benjamin Pineau.Hakan Olsson
2004-08-10spacingTheo de Raadt
2004-08-10Better implementation of the Dead Peer Detection protocol, RFC 3706.Hakan Olsson
hshoexer@ ok.
2004-08-10Linux has AES (and DES). From Benjamin Pineau.Hakan Olsson
2004-08-10If opening /dev/arandom fails, try /dev/random. Suggested by Benjamin Pineau.Hakan Olsson
2004-08-08spacingTheo de Raadt
2004-08-03Rewrite the transport reference count code to avoid leaks.Hakan Olsson
hshoexer@ ok.
2004-08-02Do not expire unestablished phase 2 SAs on SIGHUP.Hans-Joerg Hoexer
ok ho@
2004-08-02Missed to add virtual.c here. Noted by Benjamin Pineau.Hakan Olsson
2004-07-30Style.Hakan Olsson
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-14 09:34:54 +0000