summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2004-03-17For consistency and to avoid a rare memory leak, the result fromHakan Olsson
ike_auth_get_key() should always be released after use. Found and ok hshoexer@.
2004-03-15Properly check succes of chroot().Hans-Joerg Hoexer
ok ho@
2004-03-15Remove unused code.Hans-Joerg Hoexer
ok ho@
2004-03-11Fix a memleak.Hans-Joerg Hoexer
ok ho@
2004-03-10Fix payload handling flaws found by cloder@. Based on initial patch byHans-Joerg Hoexer
cloder@. Testing by markus@ cloder@ hshoexer@. ok ho@
2004-03-10Plug up memory leak.Hans-Joerg Hoexer
ok ho@
2004-03-10Reduce some noise on receipt of an invalid spi.Hans-Joerg Hoexer
ok ho@
2004-03-10Fix for PR2429, from Clemens Wittinger.Hakan Olsson
2004-03-09Plug memleaks, found by cloder@.Hans-Joerg Hoexer
ok ho@
2004-02-27Remove dead code.Hans-Joerg Hoexer
ok ho@
2004-02-27Add group 14 (modp2048) to predefined suites. Manpage also updated.Hans-Joerg Hoexer
ok ho@
2004-02-27(C)-2004Hakan Olsson
2004-02-27Follow RFC 2408 more closely regarding how to better check the proposalHakan Olsson
returned by the other peer (the responder). Some implementations (notably the Cisco PIX) does not follow a SHOULD in section 4.2 of the RFC. With certain proposal combinations this caused us to setup the wrong SA resulting in us being unable to process incoming IPsec traffic (over this tunnel). Tested against a number of different IKE implementations. hshoexer@ ok.
2004-02-26remove unused code. noticed by ho@Hans-Joerg Hoexer
ok ho@
2004-02-26tweak;Jason McIntyre
ok hshoexer@
2004-02-25Add and document configuration options Logverbose and Loglevel. As log.c nowHans-Joerg Hoexer
depends on conf.c and some regression tests use log.c, add conf.c to Makefiles where necessary. ok ho@
2004-02-20More small adjustments of log messages.Hans-Joerg Hoexer
2004-02-20Fix some double free errors. While around, adjust a log message.Hans-Joerg Hoexer
ok ho@
2004-02-19small cleanup of log messages.Hans-Joerg Hoexer
ok ho@
2004-02-19With -d, SIGINT should do a clean shutdown.Hakan Olsson
Without -d, logs should be sent to syslog, level LOG_INFO.
2004-02-19Cleanup.Hakan Olsson
2004-02-16check for isakmp_sa->transport != NULL; noticed by bluhm at genua.de ok ↵Markus Friedl
hshoexer@
2004-02-11typo; from Olivier Cherrier;Jason McIntyre
2004-02-05small logging cleanup and improvement requested by markusHans-Joerg Hoexer
ok ho@ markus@
2004-01-26Added 2-clause licenseNiklas Hallqvist
2004-01-23`Ns' implies `No', so `Ns No' -> `Ns'; (even simpler in adduser(8))Jason McIntyre
discussed with todd@
2004-01-16Added -v option. Enables logging of successful exchange completion.Hans-Joerg Hoexer
ok ho@
2004-01-09call nc correctly (nc has changed a while ago).Hans-Joerg Hoexer
ok markus@
2004-01-06small typos fixed.Hans-Joerg Hoexer
ok markus@
2004-01-06Remove redundant test for file types. Noted by Stefan Paletta.Hans-Joerg Hoexer
While around, fix typos in log messages. Both ok markus@
2004-01-03Be more careful with INITIAL-CONTACT and do not delete SPIs when gettingHakan Olsson
an INVALID-SPI notification. Issues noted by Thomas Walpuski. markus@ ok.
2003-12-22use AES_BLOCK_SIZE only for USE_AES; report martti.kuparinen@iki.fi; ok ho@Markus Friedl
2003-12-18Mention the exchange name when giving up on a message. Suggested byHakan Olsson
Michael Coulter.
2003-12-15Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14Hans-Joerg Hoexer
to 18). ok ho@
2003-12-14Log the actual port for src and dst, don't assume it's always 500.Hakan Olsson
2003-12-14Make isakmpd work on big endian linux machines. From Sebastian Klemke.Hakan Olsson
Also, a few style nits and a better error message text.
2003-12-05Style nitsHakan Olsson
2003-12-04Validate SPIs presented in DELETE messages of the informational exchange.Hans-Joerg Hoexer
ok markus@
2003-12-04TyposMiod Vallat
2003-11-20use .Dv for AF_INET and AF_INET6 (kills ugly line break);Jason McIntyre
spotted by Alexey E. Suslikov; also kill some .Pp's before displays/lists for better PostScript output;
2003-11-08typos from Jonathon Gray;Jason McIntyre
2003-11-07adress -> address, and a few more; all from Jonathon Gray;Jason McIntyre
(mvme68k/mvme88k) vs.c and (vax) if_le.c ok miod@ isakmpd ones ok ho@
2003-11-06Style nits.Hakan Olsson
2003-11-06Require encrypted messages are soon as we have the keystate for it.Hakan Olsson
Require DELETE payloads to be accompanied by HASHes, and add validation for HASH payloads without active exchanges. From Hans-Joerg Hoexer with various modifications and suggestions from me and markus@. Ok markus@.
2003-11-06spis[] type tweak. From Hans-Joerg Hoexer.Hakan Olsson
2003-11-05PFS: Perfect Forward Secrecy (RFC 2409);Jason McIntyre
from misc@ and ok markus@
2003-11-05updated URL from Jared Yanovich;Jason McIntyre
2003-10-25OpenSSL generates DNs with emailAddress, not Email.Ryan Thomas McBride
2003-10-25receiveing -> receiving; from Jared Yanovich;Jason McIntyre
2003-10-14constant_lookup() to constant_name() cleanup. markus@ ok.Hakan Olsson