Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-05-26 | do not leak fd on error path. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-24 | Use correct function names in log messages. Kill some spaces. | Hans-Joerg Hoexer | |
ok deraadt@ ho@ | |||
2004-05-23 | More KNF. Mainly spaces and line-wraps, no binary change. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-23 | remove excessive monitor_ prefixes | Theo de Raadt | |
2004-05-23 | stat before open is flawed | Theo de Raadt | |
2004-05-23 | greater care with arguments | Theo de Raadt | |
2004-05-19 | Permit symbolic protocol and service names, such as "Protocol= tcp", in the | Hakan Olsson | |
<IPsec-ID> sections. hshoexer@ ok | |||
2004-05-14 | Some more KNF, no binary change. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-05-13 | Extensions to the FIFO interface: | Hakan Olsson | |
"C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok. | |||
2004-05-10 | 64bit gcc saw missing cast | Theo de Raadt | |
2004-05-06 | KNF cleanup. hshoexer@ ok | Hakan Olsson | |
2004-05-06 | Obsolete. jakob@ ok. | Hakan Olsson | |
2004-05-03 | KNF. ok ho@ | Hans-Joerg Hoexer | |
2004-04-29 | Better checking of minimum payload lengths. Drop out safely when an unknown | Hans-Joerg Hoexer | |
payload type is encountered. While around, do some KNF. ok ho@ | |||
2004-04-28 | remove unused variable and shorten names of two other. Removed some spaces | Hans-Joerg Hoexer | |
while around. ok ho@ markus@ | |||
2004-04-28 | Reserve some payload numbers for RFC 3547 and the earlier NAT-T drafts. ↵ | Hakan Olsson | |
hshoexer@ ok. | |||
2004-04-23 | Make sure KEY_LENGTH attribute is present when checking AES proposals, | Hakan Olsson | |
required when acting as responder to SafeNet peers. Also make conf_load_defaults() readable again (KNF). hshoexer@ ok. | |||
2004-04-15 | more knf; ok hshoexer | Theo de Raadt | |
2004-04-15 | knf | Theo de Raadt | |
2004-04-15 | partial move to KNF. More to come. This has happened because there | Theo de Raadt | |
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer | |||
2004-04-15 | spaces | Theo de Raadt | |
2004-04-13 | Add missing #include. Found by Stefan Paletta. | Hans-Joerg Hoexer | |
ok henning@ ho@ | |||
2004-04-08 | swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSD | Henning Brauer | |
and NetBSD do. ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@ | |||
2004-04-08 | Set timezone before privsep, child uses now correct timezone. | Hans-Joerg Hoexer | |
Noticed by david@ ok ho@ david@ | |||
2004-04-07 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |
2004-04-07 | Reset *data in case of unknown key types | Hakan Olsson | |
2004-04-07 | -Wmissing-declarations | Hakan Olsson | |
2004-04-07 | More careful when walking LIST queues. hshoexer@, david@ ok. | Hakan Olsson | |
2004-03-31 | -Wsign-compare nits. hshoexer@ ok. | Hakan Olsson | |
2004-03-31 | Use sysdep_sa_len() instead of sa->sa_len, also correct a log_fatal() ↵ | Hakan Olsson | |
message. hshoexer@ ok. | |||
2004-03-31 | Don't assume closefrom(2) exists everywhere. hshoexer@, markus@ ok. | Hakan Olsson | |
2004-03-29 | use malloc (oops) | Theo de Raadt | |
2004-03-29 | wrong FD_ZERO(); from ho, hshoexer, markus | Theo de Raadt | |
2004-03-29 | memory mishandling; from ho | Theo de Raadt | |
2004-03-24 | Add some notes about privsep to manpage. | Hans-Joerg Hoexer | |
ok ho@ jmc@ deraadt@ | |||
2004-03-23 | Remove erroneous null termination. | Hans-Joerg Hoexer | |
ok ho@ deraadt@ | |||
2004-03-19 | Add missing bits to make already present privsep code work. Enable privsep. | Hans-Joerg Hoexer | |
ok ho@ deraadt@ markus@ | |||
2004-03-17 | For consistency and to avoid a rare memory leak, the result from | Hakan Olsson | |
ike_auth_get_key() should always be released after use. Found and ok hshoexer@. | |||
2004-03-15 | Properly check succes of chroot(). | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-03-15 | Remove unused code. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-03-11 | Fix a memleak. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-03-10 | Fix payload handling flaws found by cloder@. Based on initial patch by | Hans-Joerg Hoexer | |
cloder@. Testing by markus@ cloder@ hshoexer@. ok ho@ | |||
2004-03-10 | Plug up memory leak. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-03-10 | Reduce some noise on receipt of an invalid spi. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-03-10 | Fix for PR2429, from Clemens Wittinger. | Hakan Olsson | |
2004-03-09 | Plug memleaks, found by cloder@. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-02-27 | Remove dead code. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-02-27 | Add group 14 (modp2048) to predefined suites. Manpage also updated. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-02-27 | (C)-2004 | Hakan Olsson | |
2004-02-27 | Follow RFC 2408 more closely regarding how to better check the proposal | Hakan Olsson | |
returned by the other peer (the responder). Some implementations (notably the Cisco PIX) does not follow a SHOULD in section 4.2 of the RFC. With certain proposal combinations this caused us to setup the wrong SA resulting in us being unable to process incoming IPsec traffic (over this tunnel). Tested against a number of different IKE implementations. hshoexer@ ok. |