summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2004-05-26do not leak fd on error path.Hans-Joerg Hoexer
ok ho@
2004-05-24Use correct function names in log messages. Kill some spaces.Hans-Joerg Hoexer
ok deraadt@ ho@
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-23remove excessive monitor_ prefixesTheo de Raadt
2004-05-23stat before open is flawedTheo de Raadt
2004-05-23greater care with argumentsTheo de Raadt
2004-05-19Permit symbolic protocol and service names, such as "Protocol= tcp", in theHakan Olsson
<IPsec-ID> sections. hshoexer@ ok
2004-05-14Some more KNF, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-13Extensions to the FIFO interface:Hakan Olsson
"C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok.
2004-05-1064bit gcc saw missing castTheo de Raadt
2004-05-06KNF cleanup. hshoexer@ okHakan Olsson
2004-05-06Obsolete. jakob@ ok.Hakan Olsson
2004-05-03KNF. ok ho@Hans-Joerg Hoexer
2004-04-29Better checking of minimum payload lengths. Drop out safely when an unknownHans-Joerg Hoexer
payload type is encountered. While around, do some KNF. ok ho@
2004-04-28remove unused variable and shorten names of two other. Removed some spacesHans-Joerg Hoexer
while around. ok ho@ markus@
2004-04-28Reserve some payload numbers for RFC 3547 and the earlier NAT-T drafts. ↵Hakan Olsson
hshoexer@ ok.
2004-04-23Make sure KEY_LENGTH attribute is present when checking AES proposals,Hakan Olsson
required when acting as responder to SafeNet peers. Also make conf_load_defaults() readable again (KNF). hshoexer@ ok.
2004-04-15more knf; ok hshoexerTheo de Raadt
2004-04-15knfTheo de Raadt
2004-04-15partial move to KNF. More to come. This has happened because thereTheo de Raadt
are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
2004-04-15spacesTheo de Raadt
2004-04-13Add missing #include. Found by Stefan Paletta.Hans-Joerg Hoexer
ok henning@ ho@
2004-04-08swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSDHenning Brauer
and NetBSD do. ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@
2004-04-08Set timezone before privsep, child uses now correct timezone.Hans-Joerg Hoexer
Noticed by david@ ok ho@ david@
2004-04-07-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-04-07Reset *data in case of unknown key typesHakan Olsson
2004-04-07-Wmissing-declarationsHakan Olsson
2004-04-07More careful when walking LIST queues. hshoexer@, david@ ok.Hakan Olsson
2004-03-31-Wsign-compare nits. hshoexer@ ok.Hakan Olsson
2004-03-31Use sysdep_sa_len() instead of sa->sa_len, also correct a log_fatal() ↵Hakan Olsson
message. hshoexer@ ok.
2004-03-31Don't assume closefrom(2) exists everywhere. hshoexer@, markus@ ok.Hakan Olsson
2004-03-29use malloc (oops)Theo de Raadt
2004-03-29wrong FD_ZERO(); from ho, hshoexer, markusTheo de Raadt
2004-03-29memory mishandling; from hoTheo de Raadt
2004-03-24Add some notes about privsep to manpage.Hans-Joerg Hoexer
ok ho@ jmc@ deraadt@
2004-03-23Remove erroneous null termination.Hans-Joerg Hoexer
ok ho@ deraadt@
2004-03-19Add missing bits to make already present privsep code work. Enable privsep.Hans-Joerg Hoexer
ok ho@ deraadt@ markus@
2004-03-17For consistency and to avoid a rare memory leak, the result fromHakan Olsson
ike_auth_get_key() should always be released after use. Found and ok hshoexer@.
2004-03-15Properly check succes of chroot().Hans-Joerg Hoexer
ok ho@
2004-03-15Remove unused code.Hans-Joerg Hoexer
ok ho@
2004-03-11Fix a memleak.Hans-Joerg Hoexer
ok ho@
2004-03-10Fix payload handling flaws found by cloder@. Based on initial patch byHans-Joerg Hoexer
cloder@. Testing by markus@ cloder@ hshoexer@. ok ho@
2004-03-10Plug up memory leak.Hans-Joerg Hoexer
ok ho@
2004-03-10Reduce some noise on receipt of an invalid spi.Hans-Joerg Hoexer
ok ho@
2004-03-10Fix for PR2429, from Clemens Wittinger.Hakan Olsson
2004-03-09Plug memleaks, found by cloder@.Hans-Joerg Hoexer
ok ho@
2004-02-27Remove dead code.Hans-Joerg Hoexer
ok ho@
2004-02-27Add group 14 (modp2048) to predefined suites. Manpage also updated.Hans-Joerg Hoexer
ok ho@
2004-02-27(C)-2004Hakan Olsson
2004-02-27Follow RFC 2408 more closely regarding how to better check the proposalHakan Olsson
returned by the other peer (the responder). Some implementations (notably the Cisco PIX) does not follow a SHOULD in section 4.2 of the RFC. With certain proposal combinations this caused us to setup the wrong SA resulting in us being unable to process incoming IPsec traffic (over this tunnel). Tested against a number of different IKE implementations. hshoexer@ ok.