summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Expand)Author
2015-01-16Tweak previous: Do not put punctuation on its own line, put it at the endIngo Schwarze
2015-01-16Clean up macros in isakmpd(8).Anthony J. Bentley
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-13-/* Backwards compatibility. */Theo de Raadt
2014-12-01memcpy abort found an overlap. from dsp at 2f30. ok deraadtTed Unangst
2014-11-19Nuke yet more obvious #include duplications.Kenneth R Westerback
2014-10-29convert simple cases of select() to poll()Theo de Raadt
2014-10-25Remove unnecessary netinet/in_systm.h include.Lawrence Teo
2014-10-22Fix error reporting when reallocarray() fails. OK miod@Todd C. Miller
2014-10-18Convert malloc() with a size var using multiplication to reallocarray().Doug Hogan
2014-10-12DH_compute_key() returns -1 on error but this was notJonathan Gray
2014-10-09obvious reallocarray() conversionsTheo de Raadt
2014-08-25Sync dh.[ch] from iked. The files are identical, so any change inReyk Floeter
2014-08-25Fix a few fd leaks in isakmpd.Doug Hogan
2014-08-23Fix double free in ike_auth.cdoug
2014-08-22fix memory leak in isakmpddoug
2014-07-11add additional includes required to build with -DOPENSSL_NO_DEPRECATEDJonathan Gray
2014-05-01Correct a test for X509_get_notAfter() failing or returningJonathan Gray
2014-03-11For CA generation, go back to using a two-step procedure to create a CSR andStuart Henderson
2014-03-07If allocation of 'id' fails, don't try to deref it after 'goto fail'.Gerhard Roth
2014-01-23Remove a mid-layer which acts like arc4random isn't fairly standard.Theo de Raadt
2014-01-22regrand can die, from millertTheo de Raadt
2014-01-22improve randomization. remove some junk debugging features that areTheo de Raadt
2013-11-22Whole bunch of (unsigned char) casts carefully added for ctype calls.Theo de Raadt
2013-11-21Keep the flow until last IPsec SA is deleted, if the flow is shared byYASUOKA Masahiko
2013-11-14fix parameter types for x509 routinesTheo de Raadt
2013-11-14Add STANDARDS section to isakmpd(8).Anthony J. Bentley
2013-10-27If a constant string needs a name, use a static const array instead of aPhilip Guenther
2013-09-26Removed a break of a switch-case, which had not been removed in the last commit.Patrick Wildt
2013-07-14"r" logs to syslog; From: Anders BerggrenJason McIntyre
2013-04-24remove old backwards random junkTheo de Raadt
2013-04-16remove casts to time_t * which are not neededTheo de Raadt
2013-04-02Stop assuming time_t is longPhilip Guenther
2013-03-21remove excessive includesTheo de Raadt
2012-12-21remove makefile hacks that are no longer needed with t1 t2: working properlyMarc Espie
2012-10-29backout possible infinit-loop (from rev 1.5) when parsing nat_d;Markus Friedl
2012-09-25lost preposition "in"Otto Moerbeek
2012-08-24ikev2 is described in rfc 5996 now;Jason McIntyre
2012-08-12Use .Lk for HTTP hyperlinks, not .Pa.Ingo Schwarze
2012-07-13Support additional MODP DH groups in the Phase 1 and Phase 2.Mike Belopuhov
2012-06-30enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPChristian Weisgerber
2012-06-04Rounding up a number of bytes in a bignum returned by the BN_num_bytes()Mike Belopuhov
2012-03-24set the vendor string to OpenBSD-5.2; ok mikeb@Markus Friedl
2012-01-16import (and fix) net_addrcmp() from libc as a static function.Eric Faurot
2011-12-12Allow using FQDN as a ID payload type. Some client (eg Windows XP)YASUOKA Masahiko
2011-10-20For NAT-T with transport mode, use the ISAKMP's SA addresses for theYASUOKA Masahiko
2011-09-29ssl.8: Certifying Authority -> Certificate AuthorityJason McIntyre
2011-08-02add refcounting for "Configuration" section for acquire-mode SAsMarkus Friedl
2011-06-23Use a common text explaining how the various configuration parsers usingStuart Henderson
2011-06-15When BN_bn2bin converts a bignum to the binary representationMike Belopuhov