summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Expand)Author
2004-01-09call nc correctly (nc has changed a while ago).Hans-Joerg Hoexer
2004-01-06small typos fixed.Hans-Joerg Hoexer
2004-01-06Remove redundant test for file types. Noted by Stefan Paletta.Hans-Joerg Hoexer
2004-01-03Be more careful with INITIAL-CONTACT and do not delete SPIs when gettingHakan Olsson
2003-12-22use AES_BLOCK_SIZE only for USE_AES; report martti.kuparinen@iki.fi; ok ho@Markus Friedl
2003-12-18Mention the exchange name when giving up on a message. Suggested byHakan Olsson
2003-12-15Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14Hans-Joerg Hoexer
2003-12-14Log the actual port for src and dst, don't assume it's always 500.Hakan Olsson
2003-12-14Make isakmpd work on big endian linux machines. From Sebastian Klemke.Hakan Olsson
2003-12-05Style nitsHakan Olsson
2003-12-04Validate SPIs presented in DELETE messages of the informational exchange.Hans-Joerg Hoexer
2003-12-04TyposMiod Vallat
2003-11-20use .Dv for AF_INET and AF_INET6 (kills ugly line break);Jason McIntyre
2003-11-08typos from Jonathon Gray;Jason McIntyre
2003-11-07adress -> address, and a few more; all from Jonathon Gray;Jason McIntyre
2003-11-06Style nits.Hakan Olsson
2003-11-06Require encrypted messages are soon as we have the keystate for it.Hakan Olsson
2003-11-06spis[] type tweak. From Hans-Joerg Hoexer.Hakan Olsson
2003-11-05PFS: Perfect Forward Secrecy (RFC 2409);Jason McIntyre
2003-11-05updated URL from Jared Yanovich;Jason McIntyre
2003-10-25OpenSSL generates DNs with emailAddress, not Email.Ryan Thomas McBride
2003-10-25receiveing -> receiving; from Jared Yanovich;Jason McIntyre
2003-10-14constant_lookup() to constant_name() cleanup. markus@ ok.Hakan Olsson
2003-10-13Add a UI FIFO debug class. ok markus@ plus I think henning@Hakan Olsson
2003-10-04Avoid crash on invalid config file (missing value for LIFE_DURATION).Chad Loder
2003-09-26Fix off-by-ones in format string for 's' specifier; millert@, deraadt@ okAaron Campbell
2003-09-26don't listen to INADDR_ANY if Listen-on is specified.Cedric Berger
2003-09-25Fix off-by-one out-of-bounds write; millert@ okAaron Campbell
2003-09-25Fix one case of set length before realloc. Fix another case ofChad Loder
2003-09-24re-add AES, but without using EVP;Markus Friedl
2003-09-24back out EVP change; causes fd leaks; ok cedric@Markus Friedl
2003-09-05socket leak on error paths. from Patrick Latifi. ok deraadt@ ho@Ted Unangst
2003-09-02A couple of nits. deraadt@ ok.Hakan Olsson
2003-09-02Require ISAKMP_FLAGS_ENC on phase 2 messages. ok markus@, deraadt@.Hakan Olsson
2003-09-02For easier compilation on linux systems. Requested by Thomas Walpuski.Hakan Olsson
2003-08-28support AES in phase 1, too. switch to OpenSSL EVP interface;Markus Friedl
2003-08-20Zap an old "Identification" tag in this sample config. I have no ideaHakan Olsson
2003-08-20certpatch(8) can be used to create FQDN X509v3 extensions too.Hakan Olsson
2003-08-18typos; ho@Markus Friedl
2003-08-09new sentence, new line + small cleanup;Jason McIntyre
2003-08-08Be more careful when using constant_lookup() in messages. Pointed out byHakan Olsson
2003-08-08Fine grained selectors for Linux native IPsec. From Jean-Francois Dive.Hakan Olsson
2003-08-06Remove some double semicolons (hmm, do two semis equal a maxi?).Todd C. Miller
2003-08-06support ESP with cast/blowfish in KAME plattformsMarkus Friedl
2003-08-06support ESP with cast/blowfish on KAME platformsMarkus Friedl
2003-07-29off-by-one in a printf %sAnil Madhavapeddy
2003-07-25add sha2Markus Friedl
2003-07-25add sha2 support; ok ho@Markus Friedl
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-07-09- remove some .Ss's that worked around the old blank line bugJason McIntyre