summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Expand)Author
2019-11-14Do not print misleading error message about permission error forAlexander Bluhm
2019-08-30mop up for the pcap.3 rename;Jason McIntyre
2019-07-03snprintf/vsnprintf return < 0 on error, rather than -1.Theo de Raadt
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-02-19oops, bad Pp snuck in;Jason McIntyre
2019-02-18Rework the certificate generation examples a bit:Stuart Henderson
2019-01-22PF_ROUTE -> AF_ROUTE in the scattered sock()/setsockopt() callsKenneth R Westerback
2018-09-20add missing braces implied by indentationJonathan Gray
2018-04-17Document how to avoid isakmpd(8) source IP address pitfalls by usingStefan Sperling
2018-01-15Spacing, no object change.Martin Pieuchot
2018-01-04space -> tabMartin Pieuchot
2017-12-07Set the correct ENCAPSULATION_MODE when doing NAT-T.Martin Pieuchot
2017-12-05Use clock_gettime(CLOCK_MONOTONIC) to schedule timersJeremie Courreges-Anglas
2017-11-23in isakmpd(8), provide a hint: from scott chelohaJason McIntyre
2017-11-08In the final RFC 5903 the computation for the DH shared secret changed.Patrick Wildt
2017-10-27Support DH groups 19 to 21 and 25 to 30, just like iked(8) does.Martin Pieuchot
2017-09-18Check for failures of exchange_establish_p{1,2}() and call the givenMartin Pieuchot
2017-08-22Remove listing of fixed bugs.Martin Pieuchot
2017-08-06Prevent a use-after-free by always passing dynamically allocatedMartin Pieuchot
2017-07-18Prevent a NULL dereference when comparing incomplete SAs.Martin Pieuchot
2017-07-10remove misc. depend and yacc nits that no longer matter.Marc Espie
2017-07-03Generate source and header files for regress on demand.Alexander Bluhm
2017-06-16mark files as BUILDFIRST, or write explicit dependencies, so that mostMarc Espie
2017-04-02Check return value of asprintf(), and don't use 0 as a char *Tom Cosgrove
2017-02-28Depending on the addresses, ipsecctl(8) automatically groups saAlexander Bluhm
2017-02-03Stop assuming that in_{addr,port}_t are typedefed in <sys/types.h> andPhilip Guenther
2017-01-04Remove modular exponential groups specified in RFC5114Mike Belopuhov
2017-01-01Hyphenate compound adjectives 'up-to-date', 'out-of-date' and 'well-known'Theo Buehler
2016-09-03A commented block starts withTheo de Raadt
2016-09-02move links from http to https://www.openbsd.org/Theo Buehler
2016-08-26Pull in <sys/select.h> for fd_setPhilip Guenther
2016-04-04Fix memory leak. Call proto_free() always to free proto.YASUOKA Masahiko
2016-04-02Another use for fcntl() and thus of the superfluous 3rd parameterKenneth R Westerback
2016-03-16More "(<blah> *)0" -> NULL, avoiding any stdarg functions.Kenneth R Westerback
2016-03-10Don't retransmit responses for unauthenticated messages.YASUOKA Masahiko
2016-03-05fix steps for cert creation;Jason McIntyre
2016-02-29Print ssize_t with %zd; ok deraadt@ mmcc@Jeremie Courreges-Anglas
2016-01-11typo fix; from julian hsiaoJason McIntyre
2016-01-08tweak; from julian hsiaoJason McIntyre
2015-12-10Remove NULL-checks before free(). ok tb@mmcc
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-10-15A classic case for bzero() -> explicit_bzero()mmcc
2015-09-25drop useless .Xo and .Bk, and shorten by avoiding some .SmIngo Schwarze
2015-08-20Do not cast a size_t to (unsigned long) to pass it as an argument to malloc.Theo de Raadt
2015-08-20<stdlib.h> is included, so do not need to cast result fromTheo de Raadt
2015-06-03Do not assume that asprintf() clears the pointer on failure, whichTodd C. Miller
2015-04-21No need to do "size = (size_t)sb.st_size" both before and afterJonathan Gray
2015-04-20Log if we refuse to continue the exchange when another one that correspondsMike Belopuhov
2015-04-17Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexerMike Belopuhov
2015-04-14Remove support for storing credentials and auth information in the kernel.Mike Belopuhov