summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Collapse)Author
2000-12-29correct m88k definitions.Steve Murphree
2000-12-19make sure isakmpd works with the openssl-0.9.6 APIMarkus Friedl
2000-12-19gmp is gone, make it build again; cvs retardMichael Shalayeff
2000-12-19gmp is gone, make it build againMichael Shalayeff
2000-12-15.Sh EXAMPLE -> .Sh EXAMPLES. Even if there's only one example, at leastAaron Campbell
this is consistent.
2000-12-15only create new exchange on SA expires, when there has been used.Niels Provos
okay angelos@
2000-12-12pids are useful in syslog; ok angelos@Todd T. Fries
2000-12-12enumerate debugging number meanings; ok angelos@Todd T. Fries
2000-12-12revert former patch, the correct solution is to not compile this file at allNiklas Hallqvist
for architectures without shlibs
2000-12-12Merge with EOM 1.112Niklas Hallqvist
author: niklas style author: angelos Don't limit Phase 1 SA establishment -- while this does limit resource consumption, it's neither foolproof nor entirely correct (it introduces some synchronization problems).
2000-12-12Merge with EOM 1.79Niklas Hallqvist
author: niklas whitespace author: niklas style author: angelos Pass the local/remote Phase 1 ID to the flow, so it can be reused when an SA is re-negotiated. author: angelos Save the Phase 1 IDs along with the flow. author: angelos Don't block new phase 1 SA establishment -- avoids some sync problems. Also, handle kernel-issued expirations more intelligently. author: angelos isakmpd can now negotiate transport protocol/ports (either through the configuration file or through kernel ACQUIREs). author: angelos Fix flow cleanup/setup on renegotiation (or failure thereof) -- thanks to cedric@wireless-networks.com for testing and feedback. author: angelos Remove unused code. author: angelos Don't be too permissive with the installed flows -- after all, we can just run more negotiations. author: angelos ifndef, not ifdef author: angelos Delete ingress flow correctly. author: angelos Initialize structure.
2000-12-12Merge with EOM 1.51Niklas Hallqvist
author: niklas more fascistoid style author: angelos Don't insert the *same* entry in two or more buckets! Thanks to cedric@wireless-networks.com for reporting/debugging and coming up with the patch. author: angelos Correct format string. author: angelos x509_hash() should also skip the cert length (willey@serasystems.com) author: angelos Add some error messages (ingham@ara.com)
2000-12-12Merge with EOM 1.73Niklas Hallqvist
author: angelos Pass the local/remote Phase 1 ID to the flow, so it can be reused when an SA is re-negotiated. author: angelos isakmpd can now negotiate transport protocol/ports (either through the configuration file or through kernel ACQUIREs).
2000-12-12sysdep/openbsd/sysdep.c: Merge with EOM 1.9Niklas Hallqvist
pf_encap.h: Merge with EOM 1.13 pf_key_v2.h: Merge with EOM 1.4 sysdep.h: Merge with EOM 1.17 author: angelos Pass the local/remote Phase 1 ID to the flow, so it can be reused when an SA is re-negotiated.
2000-12-12Merge with EOM 1.55Niklas Hallqvist
author: angelos Add Default-phase-1-ID tag in [General], and document its use. author: angelos isakmpd can now negotiate transport protocol/ports (either through the configuration file or through kernel ACQUIREs).
2000-12-12Merge with EOM 1.48Niklas Hallqvist
author: angelos Add Default-phase-1-ID tag in [General], and document its use. author: angelos Default Phase 1 entry.
2000-12-12Merge with EOM 1.31Niklas Hallqvist
author: niklas style nit, we only use NULL in isakmpd when a manpage mandates it author: angelos Also check for default Phase 1 ID.
2000-12-12Merge with EOM 1.143Niklas Hallqvist
author: niklas Style nits author: angelos Pass the local/remote Phase 1 ID to the flow, so it can be reused when an SA is re-negotiated. author: angelos isakmpd can now negotiate transport protocol/ports (either through the configuration file or through kernel ACQUIREs). author: angelos CAST-128 has a maximum of 128bit keys, not 256.
2000-12-12Merge with EOM 1.143Niklas Hallqvist
author: angelos Careful when copying IDs. author: angelos Oops, what am I thinking ? author: angelos Ooops again, I reverted the wrong patch. author: angelos Oops, shouldn't have committed this. author: angelos x509_hash() should also skip the cert length (willey@serasystems.com) author: angelos If it's a dynamically established Phase 2 SA, don't keep a copy of it in isakmpd (the kernel keeps track of everything in this case). author: angelos Comment. author: angelos If no time-based lifetime was negotiated, don't release the SA.
2000-12-12Merge with EOM 1.17Niklas Hallqvist
author: niklas Do not try to deal with weak syms on archs that do not have shlibs
2000-12-12Merge with EOM 1.42Niklas Hallqvist
author: angelos isakmpd can now negotiate transport protocol/ports (either through the configuration file or through kernel ACQUIREs).
2000-12-02Error messages.Angelos D. Keromytis
2000-12-02Add comment.Angelos D. Keromytis
2000-12-02Manual sync with EOM -- only release an SA if it's referenced by theAngelos D. Keromytis
timeout routine (should there be a default expiration if none is negotiated ?)
2000-12-02A bunch of stability fixes, thanks to cedric@wireless-networks.com forAngelos D. Keromytis
testing and feedback.
2000-11-30x509_hash() should also ignore the id length (for matching purposes)Angelos D. Keromytis
-- willey@serasystems.co
2000-11-27ifndef, not ifdefAngelos D. Keromytis
2000-11-27Fix deletion of flows.Angelos D. Keromytis
2000-11-23Merge with EOM 1.23Niklas Hallqvist
author: niklas style nits author: angelos Typecast so compiler shuts up. author: ho Use stat(), not lstat(). author: niklas style and removal of unused, unneeded code
2000-11-23Merge with EOM 1.45Niklas Hallqvist
author: niklas style author: angelos Better ID matching, should solve (some?) of PGPnet interoperability problems. From mickey@
2000-11-23Merge with EOM 1.28Niklas Hallqvist
author: niklas Fix log message author: niklas style
2000-11-23Merge with EOM 1.56Niklas Hallqvist
author: niklas style nits author: angelos Print and use correct port when looking at listening sockets. Don't setup unnecessary flows on the receiver side. author: angelos Careful on the type used by inet_ntoa() author: niklas byte ordering
2000-11-23Merge with EOM 1.24Niklas Hallqvist
author: niklas sync with OpenBSD author: angelos Update.
2000-11-23Merge with EOM 1.59Niklas Hallqvist
author: angelos Initialize variable, avoid free() warnings. author: provos when cert_get fails dont dereference p if its NULL, found by francis.dupont@enst-bretagne.fr
2000-11-23samples/singlehost-east.conf: Merge with EOM 1.10Niklas Hallqvist
samples/singlehost-west.conf: Merge with EOM 1.10 samples/singlehost-setup.sh: Merge with EOM 1.3 author: niklas use networks that fits me better
2000-11-23policy.c: Merge with EOM 1.49Niklas Hallqvist
util.h: Merge with EOM 1.10 author: niklas style and removal of unused, unneeded code
2000-11-23Merge with EOM 1.53Niklas Hallqvist
author: niklas sync with OpenBSD
2000-11-21CAST-128 has a maximum of 128bit keys, not 256.Angelos D. Keromytis
2000-11-19XXX - Alpha port doesn't currently support weak symbolsTodd C. Miller
2000-11-17Merge with EOM (since Niklas won't get off his nether regions)Angelos D. Keromytis
2000-11-17HMAC96->HMAC as needed.Angelos D. Keromytis
2000-11-09Remove -offset indent so these lines don't wrap over 80 chars; deraadt@Aaron Campbell
2000-10-30Fix bug with ACQUIRE message.Angelos D. Keromytis
2000-10-29Put .Dt's argument in all-caps; nate@Aaron Campbell
2000-10-27conf.c: Merge with EOM 1.46Niklas Hallqvist
util.c: Merge EOM diff 1.20 - 1.21, i.e. 1.19 is still left to be merged author: ho Use stat(), not lstat().
2000-10-26Merge with EOM 1.45Niklas Hallqvist
author: niklas fgetc returns int not char; Boris Prochazka <boris@stargate.ipunplugged.com>
2000-10-26Merge with EOM 1.10Niklas Hallqvist
author: niklas getopt returns int not char; Boris Prochazka <boris@stargate.ipunplugged.com>
2000-10-16Merge with EOM 1.135Niklas Hallqvist
author: provos better referencing. okay niklas@ author: angelos Eliminate bogus freeing of static variable.
2000-10-16Merge with EOM 1.44Niklas Hallqvist
author: angelos Just to be on the safe side, use a struct stat. author: angelos Only do the secrecy check and parse the configuration file if it actually exists. author: angelos Actually create all the pre-configured Transforms and Suites, even if the user doesn't actually define them in the configuration file; ugly kludge, but it allows use of isakmpd without a configuration file. author: angelos Add RIPEMD negotiation/configuration.
2000-10-16Merge with EOM 1.48Niklas Hallqvist
author: angelos Fix comment. author: angelos Add RIPEMD negotiation/configuration.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 07:21:42 +0000