summaryrefslogtreecommitdiff
path: root/sbin/isakmpd
AgeCommit message (Expand)Author
2005-02-22fix wrong line break in comment.Moritz Jodeit
2005-02-22build delete messages for isakmp sa correctly.Hans-Joerg Hoexer
2005-02-22better error messagesHans-Joerg Hoexer
2005-02-16On shutdown also send delete messages for isakmp SAs.Hans-Joerg Hoexer
2005-02-10Also add DPD.Hakan Olsson
2005-02-10Make it compile.Hakan Olsson
2005-02-10Add NAT-T here too.Hakan Olsson
2005-02-10ignore_policy should be ifdef USE_POLICY. hshoexer@ okHakan Olsson
2005-01-31Avoid dereferencing a NULL pointerHans-Joerg Hoexer
2005-01-31Remove unused stuff.Hans-Joerg Hoexer
2005-01-30Avoid null pointer dereference when deleting not fully established SAs.Hans-Joerg Hoexer
2005-01-29some knf and space killing, no binary change.Hans-Joerg Hoexer
2005-01-29Handle some pointers more carefully. From pat@ some while ago.Hans-Joerg Hoexer
2005-01-05kill whitespace;Jason McIntyre
2005-01-05Discourage using aggressive mode.Hans-Joerg Hoexer
2004-12-28proper portable C; ok hshoexerTheo de Raadt
2004-12-28Correctly determine length of rsa key passed by the kernel to userland. FoundHans-Joerg Hoexer
2004-12-27Fix broken pointer arithmetic when receiving a RSA key from the kernel. FoundHans-Joerg Hoexer
2004-12-22Fix parenthesis mismatch, from Stefan Miltchev. Thanks!Hans-Joerg Hoexer
2004-12-14Reword comment a bit for clarity. hshoexer@ ok.Hakan Olsson
2004-12-14Allow the Address, Network, or Netmask values of the <IPsec-ID> to beRyan Thomas McBride
2004-12-13make sure the isakmpd_s has id_r/s set; ok hshoexer, hoMarkus Friedl
2004-12-10check msg->isakmp_sa != NULL before the transport gets updated; ok hshoexerMarkus Friedl
2004-12-081. allow up to DPD_RETRANS_MAX retransmitted R_U_THERE messages.Markus Friedl
2004-12-08NAT/T: replace the isakmpd SA transport with the transport from theMarkus Friedl
2004-12-06RFC2409 mandates min and max nonce lengths. hshoexer@ ok.Hakan Olsson
2004-11-29Spell precede correctly.Jonathan Gray
2004-11-18use hash and not hmac to calculate NAT-D payloads. Also add NAT-D payload forHans-Joerg Hoexer
2004-11-10Use ${STATIC} rather than -static (dont hardcode). ok miod@Dale Rahn
2004-11-08rename char array realpath to pathreal to avoid naming conflict withHans-Joerg Hoexer
2004-11-08more monitor cleanup:Hans-Joerg Hoexer
2004-11-08no const for sysdep_sa_len (not yet), slipped in during previous commit...Hans-Joerg Hoexer
2004-11-08monitor cleanup: honor const, added missing inlcude, missing typecast (makesHans-Joerg Hoexer
2004-11-08make lint happy and honor const.Hans-Joerg Hoexer
2004-10-20fix potential memleaks & small cleanup. found by patrick latifi, thanks!Hans-Joerg Hoexer
2004-10-08pull in some changes from libc arc4random (only relevant for non-OpenBSDHans-Joerg Hoexer
2004-10-01add some missing $, ok djm@ 'That looks fine to me' millert@Jonathan Gray
2004-09-24Don't process NAT-T keepalives. Noted by Kamel Messaoudi. hshoexer@ okHakan Olsson
2004-09-20compile cleanly with -Wsign-compareHans-Joerg Hoexer
2004-09-20Remove __func__Hans-Joerg Hoexer
2004-09-17avoid signal race.Hans-Joerg Hoexer
2004-09-17Missing #ifdefs.Hakan Olsson
2004-09-17#include <stdlib.h> for srandom().Hakan Olsson
2004-09-17Permit next payload type NAT-OA. Noted by Kamel Messaoudi.Hakan Olsson
2004-08-23We need to set sa->initiator before checking if the newly created SAHakan Olsson
2004-08-23Default enable DPD (Dead Peer Detection) support. hshoexer@ okHakan Olsson
2004-08-23Indent nit.Hakan Olsson
2004-08-17check for msg->isakmpg_sa being NULL before referencingHans-Joerg Hoexer
2004-08-14When using -K (keynote disabled), check peers' proposal against isakmpd.conf.Hans-Joerg Hoexer
2004-08-13extra check for no message case; ok markus, deraadt, hshoexer, henningDamien Miller