summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Expand)Author
2003-01-09Proper id_string for SET/ACK responder, plus attr payload fixes.Hakan Olsson
2003-01-09Don't write past the end of the address buffer. Found by Theo.Hakan Olsson
2003-01-09Add some #ifdef USE_ISAKMP_CFG, no need to compile in code that willHakan Olsson
2003-01-09Enable SET/ACK (ike-mode-cfg) when acting as responder. From TomasHakan Olsson
2003-01-04spellingTheo de Raadt
2002-12-06Set transform from default. PR#3008Hakan Olsson
2002-12-06Section and tag comparisions should be case-insensitive. PR#3010, Mike Neuman.Hakan Olsson
2002-12-04bit_ffc(3) returns a -1 location for a full bitset. Problem found byHakan Olsson
2002-12-04allow ACQUIRE with empty EXT_ADDRESS_SRC; PR 2996; ok angelos@, ho@Markus Friedl
2002-12-03Add -4/-6 cmdline options to select what address family (IPv4,v6) to use.Hakan Olsson
2002-12-03LOG_DBG for missing ca/, certs/, crls/ dirs, notHakan Olsson
2002-11-27Make sure daemon() does not close any fd opened during initialization.Hakan Olsson
2002-11-27Update document date.Hakan Olsson
2002-11-21Add 'rawkey' to FEATURES.Hakan Olsson
2002-11-21-Wshadow nits.Hakan Olsson
2002-11-21hmac_init and prf_alloc should use unsigned lengths. Problem pointed out by P...Hakan Olsson
2002-11-15Missing "Configuration" tag in a Phase-1 peer was not handled correctly,Hakan Olsson
2002-11-14Use %d instead of %2d for better matching. From Mike Neuman. Fixes PR#2848.Hakan Olsson
2002-11-14Better whitespace/newline handling, this should make broken lines andHakan Olsson
2002-11-14correct IPv6 setsockopt for ipsec operation. angelos okJun-ichiro itojun Hagino
2002-11-10fix SEE ALSO; ho ok.Federico G. Schwindt
2002-11-09more SEE ALSO fixes.Federico G. Schwindt
2002-11-09SEE ALSO reordering and corrections.Federico G. Schwindt
2002-11-08I missed a 'return' statement. Also spotted by Aref Taidi. Thanks.Hakan Olsson
2002-11-06More careful will alloc/free. Spotted by Aref Taidi.Hakan Olsson
2002-09-11signed vs unsigned from -pedantic.Hakan Olsson
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-09-08Fix -pedantic errors.Hakan Olsson
2002-09-06remove Xr to photurisTheo de Raadt
2002-09-05Without IDs wait until next step/retry to handle CERTREQs. This shouldHakan Olsson
2002-09-05Do not require the presence of subjectAltName in certificates used forHakan Olsson
2002-09-05Do not create SAs for transaction exchanges either. By niklas@Hakan Olsson
2002-09-03add strlcpy/cat for BSD/OSMarkus Friedl
2002-09-03CPI_RESERVED_MIN is not defined on KAME+BSD/OS; ok ho@Markus Friedl
2002-08-29need CPI_xx declsJun-ichiro itojun Hagino
2002-08-29size_t has to be casted to u_long on printing.Jun-ichiro itojun Hagino
2002-08-29Work around arguably correct OpenSSL behaviour and only ask for CRLHakan Olsson
2002-08-23Initial support for MacOS X (v10.2 and later).Hakan Olsson
2002-08-23Small cleanup.Hakan Olsson
2002-08-23Another format tweakHakan Olsson
2002-08-23Proper formatHakan Olsson
2002-08-08Append to the packet log file, don't overwrite. Requested by pb@.Hakan Olsson
2002-08-07A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.Hakan Olsson
2002-08-02Check inet_aton() failure with == 0, not == -1; millert@ ok.Aaron Campbell
2002-08-02Mention CRL support, tag and default value.Hakan Olsson
2002-08-02CRL support for isakmpd. From <Thomas.Walpuski@gmx.net> with some minorHakan Olsson
2002-07-16fix $OpenBSD TagMarkus Friedl
2002-07-11malloc() failure tests; rimshot@pandora.beTheo de Raadt
2002-07-09HASH payload validation does not require an exchange.Hakan Olsson
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson