summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2001-11-03Add stub for struct X509_STOREHakan Olsson
2001-11-03We get ssl.h with x509.h/libcrypto.hHakan Olsson
2001-10-26Update for FreeBSD port. Noted by olof@crt.se.Hakan Olsson
2001-10-26libcrypto.h should be included. Sort includes.Hakan Olsson
2001-10-26As sysdep/ is included for all OSes, this file is now obsolete.Hakan Olsson
2001-10-26Change to use sysdep_sa_len() function.Hakan Olsson
2001-10-26Add sysdep_sa_len function.Hakan Olsson
2001-10-26Just rename sockaddr_data/len functions to sockaddr_addrdata/addrlen.Hakan Olsson
2001-10-26Sometimes the daemon will not die promptly on SIGTERM, even thoughHakan Olsson
all DELETE notifications is sent out. Create a prioritized send-queue for the DELETE messages to solve this. Some (C)-2001. niklas@ ok.
2001-10-12SADB_X_IDENTTYPE_CONNECTION appeared after 2.9. niklas@ ok.Hakan Olsson
2001-10-11Fix various bugs in the example configuration. Most entries areHakan Olsson
"pregenerated", so indicate which aren't. 'Default-phase-N-lifetime' replaces LIFE_nnn_SECS.
2001-10-09Print correct portnr in warning msg.Hakan Olsson
2001-10-05Extend the FIFO ui with the 'D A <level>' (to set all debug levels) andHakan Olsson
'D T' (to toggle all logging on and off) commands. niklas@ ok.
2001-10-05Missed this file; some more debug level fixes.Hakan Olsson
2001-10-05Some more debug level fixes.Hakan Olsson
2001-10-05Tweak a couple of debug levels.Hakan Olsson
2001-10-05{local,remote}_negotiation_address can also be IPv6.Hakan Olsson
Replace 'idea' with 'aes' in the examples.
2001-10-04Update BUGS section (after some bugging from ho@)Angelos D. Keromytis
2001-10-04IPv6 type addresses and nets are supported now. Some style fixes.Hakan Olsson
Also add a BUGS section describing why combining predefined MD5 and SHA suites in the same quick-mode proposal will currently not work.
2001-10-02change timeval to bpf_timeval; 32 bit in size, permitting much greater ↵Theo de Raadt
portability
2001-08-31(c)-2001Hakan Olsson
2001-08-30Mention which debug levels we currently use.Hakan Olsson
2001-08-27Compile on alpha.Hakan Olsson
2001-08-27un-borkTheo de Raadt
2001-08-26more styleNiklas Hallqvist
2001-08-25Enable IKE mode config, as it works ok with PGPnet and at least has a usableNiklas Hallqvist
configuration method. Documentation will follow.
2001-08-25Use x509_DN_string API. Style fixes.Niklas Hallqvist
2001-08-25Add x509_DN_string API to get a printable DN component given oneNiklas Hallqvist
rpresented in ASN.1
2001-08-25StyleNiklas Hallqvist
2001-08-25Casting of lhs, is not what you think it is.Niklas Hallqvist
2001-08-24Send DELETE notifications for all active SAs when we shut down the daemon.Hakan Olsson
This "clean" shutdown happens on SIGTERM ('kill <pid>') or if a 'Q' command is input to the fifo UI. Suggested by <Ghislaine.Labouret@hsc.fr>.
2001-08-24Initial IPCOMP support.Hakan Olsson
2001-08-24I was only going to remove #include "init.h", but found 8 moreHakan Olsson
#include's we don't need here.
2001-08-24typo in debug msgHakan Olsson
2001-08-23Make the wildcard address use SO_REUSEPORT, so multiple instances ofAngelos D. Keromytis
isakmpd can run on the same machine and reuse the wildcard address. This is intended mostly for debugging and testing purposes, so multiple listener issues are not relevant.
2001-08-23Reinitialize transports on SIGUP.Angelos D. Keromytis
2001-08-23Update (SPD entries are deleted when SPI is removed, and new addressesAngelos D. Keromytis
are identified on a SIGUP or INADDR_ANY packet).
2001-08-23Use ipsec_id_string as the section name for IKE mode config.Niklas Hallqvist
2001-08-23Correct ipsec_id_string buffer and length handling.Niklas Hallqvist
2001-08-23Compile on old systems, my version.Niklas Hallqvist
2001-08-23RSA-enabling is not necessary anymore.Niklas Hallqvist
2001-08-23ignore EEXIST for SPDADD on KAME; ok ho@Markus Friedl
2001-08-23sync w/ netbsdMarkus Friedl
2001-08-23recieve -> receiveAaron Campbell
2001-08-22Revert last change.Hakan Olsson
2001-08-22Compile on older systems.Hakan Olsson
2001-08-22use ipsec_id_string() when generating rawkey file names.Hakan Olsson
2001-08-22If we fail to get a key from DNSSEC, RAWKEY can still succeed.Hakan Olsson
2001-08-22Modify as per deraadt@'s wishes. aaron@ ok.Hakan Olsson
2001-08-22Add an example.Hakan Olsson