summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Expand)Author
2003-12-15Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14Hans-Joerg Hoexer
2003-12-14Log the actual port for src and dst, don't assume it's always 500.Hakan Olsson
2003-12-14Make isakmpd work on big endian linux machines. From Sebastian Klemke.Hakan Olsson
2003-12-05Style nitsHakan Olsson
2003-12-04Validate SPIs presented in DELETE messages of the informational exchange.Hans-Joerg Hoexer
2003-12-04TyposMiod Vallat
2003-11-20use .Dv for AF_INET and AF_INET6 (kills ugly line break);Jason McIntyre
2003-11-08typos from Jonathon Gray;Jason McIntyre
2003-11-07adress -> address, and a few more; all from Jonathon Gray;Jason McIntyre
2003-11-06Style nits.Hakan Olsson
2003-11-06Require encrypted messages are soon as we have the keystate for it.Hakan Olsson
2003-11-06spis[] type tweak. From Hans-Joerg Hoexer.Hakan Olsson
2003-11-05PFS: Perfect Forward Secrecy (RFC 2409);Jason McIntyre
2003-11-05updated URL from Jared Yanovich;Jason McIntyre
2003-10-25OpenSSL generates DNs with emailAddress, not Email.Ryan Thomas McBride
2003-10-25receiveing -> receiving; from Jared Yanovich;Jason McIntyre
2003-10-14constant_lookup() to constant_name() cleanup. markus@ ok.Hakan Olsson
2003-10-13Add a UI FIFO debug class. ok markus@ plus I think henning@Hakan Olsson
2003-10-04Avoid crash on invalid config file (missing value for LIFE_DURATION).Chad Loder
2003-09-26Fix off-by-ones in format string for 's' specifier; millert@, deraadt@ okAaron Campbell
2003-09-26don't listen to INADDR_ANY if Listen-on is specified.Cedric Berger
2003-09-25Fix off-by-one out-of-bounds write; millert@ okAaron Campbell
2003-09-25Fix one case of set length before realloc. Fix another case ofChad Loder
2003-09-24re-add AES, but without using EVP;Markus Friedl
2003-09-24back out EVP change; causes fd leaks; ok cedric@Markus Friedl
2003-09-05socket leak on error paths. from Patrick Latifi. ok deraadt@ ho@Ted Unangst
2003-09-02A couple of nits. deraadt@ ok.Hakan Olsson
2003-09-02Require ISAKMP_FLAGS_ENC on phase 2 messages. ok markus@, deraadt@.Hakan Olsson
2003-09-02For easier compilation on linux systems. Requested by Thomas Walpuski.Hakan Olsson
2003-08-28support AES in phase 1, too. switch to OpenSSL EVP interface;Markus Friedl
2003-08-20Zap an old "Identification" tag in this sample config. I have no ideaHakan Olsson
2003-08-20certpatch(8) can be used to create FQDN X509v3 extensions too.Hakan Olsson
2003-08-18typos; ho@Markus Friedl
2003-08-09new sentence, new line + small cleanup;Jason McIntyre
2003-08-08Be more careful when using constant_lookup() in messages. Pointed out byHakan Olsson
2003-08-08Fine grained selectors for Linux native IPsec. From Jean-Francois Dive.Hakan Olsson
2003-08-06Remove some double semicolons (hmm, do two semis equal a maxi?).Todd C. Miller
2003-08-06support ESP with cast/blowfish in KAME plattformsMarkus Friedl
2003-08-06support ESP with cast/blowfish on KAME platformsMarkus Friedl
2003-07-29off-by-one in a printf %sAnil Madhavapeddy
2003-07-25add sha2Markus Friedl
2003-07-25add sha2 support; ok ho@Markus Friedl
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-07-09- remove some .Ss's that worked around the old blank line bugJason McIntyre
2003-06-20Be a bit more verbose when we give up on ever seeing a response to theHakan Olsson
2003-06-17Sync with share/misc/license.template and add missing DARPA creditTodd C. Miller
2003-06-15ID copying should happen earlier in exchange_finalize so that we won't loseHakan Olsson
2003-06-14allocate payload_node with calloc instead of mallocHakan Olsson
2003-06-10boring cleanupsTheo de Raadt
2003-06-10Do not crash on unsupported IPSec ID types, as noted by Eric Boudrand.Hakan Olsson