summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2005-03-29Always use network byte order when stuffing port numbers into IPSEC IDChad Loder
packets. This reinstates the correct part of r1.106 which did ntohs incorrectly on received port numbers already in host byte order. OK ho@
2005-03-22Compile when nat_traversal is disabled.Chad Loder
OK hshoexer
2005-03-22Do not leak keynote session in error path.Hans-Joerg Hoexer
ok cloder@
2005-03-18Back out a possible bogus minor diff until we investigate whatChad Loder
broke. OK deraadt@
2005-03-15reset config line numbers, when daemon gets reinitialized.Moritz Jodeit
prevents wrong line numbers in error cases. help from jaredy@ and ok hshoexer@.
2005-03-15small log message fix.Marco Pfatschbacher
ok hshoexer@, markus@
2005-03-13Typo; spotted by Richard Ben AleyaMiod Vallat
2005-03-11simplify monitor main loopHans-Joerg Hoexer
ok ho@
2005-03-10remove dead code, noted by ho@Hans-Joerg Hoexer
2005-03-10Avoid memory leak if strdup should fail.Chad Loder
OK hshoexer@
2005-03-10Avoid crash on finalization. We have been using this diffChad Loder
in production since mid-2003. OK hshoexer@, markus@, ho@
2005-03-05Always use correct byte order when stuffing port numbers into packets.Chad Loder
OK hshoexer@, ho@
2005-03-05No need to allocate a local digest buffer. Cleanup error path. hshoexer@ ok.Hakan Olsson
2005-03-05No need to use a local hashsize. hshoexer@ ok.Hakan Olsson
2005-03-05Silence a couple of annoying gcc3 warnings. hshoexer@ ok.Hakan Olsson
2005-03-05Add RFC3947 NAT-T vendor ID string. hshoexer@ ok.Hakan Olsson
2005-03-05No need for err.h. hshoexer@ okHakan Olsson
2005-03-04remove unused variable.Hans-Joerg Hoexer
2005-03-04cleanup binding and cloning functions, use text2port(), correctlyHans-Joerg Hoexer
determin the encap port. This makes udpencap fully useable on ports other than the default 4500. ok ho cloder
2005-03-04remove unused function udp_decode_port(), add modified version as text2port() toHans-Joerg Hoexer
utilities. ok cloder ho
2005-03-04remove unused stuff.Hans-Joerg Hoexer
ok ho@
2005-03-04remove unused variable.Hans-Joerg Hoexer
noticed by and ok markus
2005-03-04fix leak when a phase 2 SA cannot create an exchange for the matching phase 1Markus Friedl
ok ho@, hshoexer@
2005-03-03fix typo in log msg.Moritz Jodeit
ok hshoexer@
2005-03-03handle return value of snprintf more carefullyHans-Joerg Hoexer
ok cloder ho
2005-03-02correct function name in log messageHans-Joerg Hoexer
2005-03-02knf, linewrapping, whitespaces, no binary changeHans-Joerg Hoexer
2005-02-27cleanup correctly in some error paths.Patrick Latifi
ok hshoexer
2005-02-27where possible, use bzero instead of memsetHans-Joerg Hoexer
ok cloder henning
2005-02-25forgot to remove -P from getopt().Hans-Joerg Hoexer
2005-02-25Zap -P option. It has never done anything. While there tweak descripton ofHans-Joerg Hoexer
-N. zap -P ok ho@
2005-02-25Fix an obviously incorrect call to memset. '0' and 0 are not the sameChad Loder
thing. Input and OK from markus@, ho@, niklas@, deraadt@, hshoexer@
2005-02-24disable the SA dpd timer on sa_free(). this avoid a raceMarkus Friedl
between DPD and initial contact (double free); ok hshoexer
2005-02-24dpd_find_sa: only ready SAs, otherwise DPD will delete SAs owned byMarkus Friedl
an exchange; ok hshoexer
2005-02-24Add -N switch to select port for udpencap. Thus it's possible to run multipleHans-Joerg Hoexer
isakmpds on different ports specified with -p and -N. ok ho@
2005-02-24Never respond to 0-length UDP packets. Reduces, but does not eliminateChad Loder
probability that isakmp service will be detected during port scans. OK hoexer@
2005-02-22fix wrong line break in comment.Moritz Jodeit
ok hshoexer@
2005-02-22build delete messages for isakmp sa correctly.Hans-Joerg Hoexer
ok and help ho@
2005-02-22better error messagesHans-Joerg Hoexer
ok ho
2005-02-16On shutdown also send delete messages for isakmp SAs.Hans-Joerg Hoexer
ok ho
2005-02-10Also add DPD.Hakan Olsson
2005-02-10Make it compile.Hakan Olsson
2005-02-10Add NAT-T here too.Hakan Olsson
2005-02-10ignore_policy should be ifdef USE_POLICY. hshoexer@ okHakan Olsson
2005-01-31Avoid dereferencing a NULL pointerHans-Joerg Hoexer
ok msf
2005-01-31Remove unused stuff.Hans-Joerg Hoexer
ok markus
2005-01-30Avoid null pointer dereference when deleting not fully established SAs.Hans-Joerg Hoexer
ok ho@
2005-01-29some knf and space killing, no binary change.Hans-Joerg Hoexer
2005-01-29Handle some pointers more carefully. From pat@ some while ago.Hans-Joerg Hoexer
ok ho@
2005-01-05kill whitespace;Jason McIntyre