summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
1999-08-26Merge with EOM 1.38Niklas Hallqvist
author: angelos When doing preshared key authentication, if the responder has the initiator's ID (as is the case in aggressive mode) and a shared key cannot be found for the initiator's address (as may be the case for a roaming laptop user), try to find the password under using as a lookup key the initiator's Phase 1 ID, if it's an IPv4 address, an FQDN (host.domain), or a User-FQDN (user@host.domain). This allows us to support roaming laptop users with preshared key authentication, using aggressive mode (sick). There is also a lot of experimental, insecure, and ifdef'd out code for fetching credentials and secret passphrases from a remote server if all else fails. Extremely experimental code. Don't use. You'll be blinded and your hair will fall if you even think about using it. You have been warned. author: angelos Complete policy work; tested for the shared-key case. Documentation needed. author: ho Compile without USE_LIBCRYPTO and HAVE_DLOPEN. author: niklas Missing dynamic link fixes author: niklas Add support for dynamic loading of optional facilities, libcrypto first.
1999-08-26Merge with EOM 1.36Niklas Hallqvist
author: ho style author: ho Don't accidentally overwrite files with the FIFO.
1999-08-26Merge with EOM 1.8Niklas Hallqvist
author: angelos Complete policy work; tested for the shared-key case. Documentation needed. author: niklas Add support for dynamic loading of optional facilities, libcrypto first.
1999-08-26Merge with EOM 1.3Niklas Hallqvist
author: niklas A working way to add a RCS Id to a keynote policy author: angelos Complete policy work; tested for the shared-key case. Documentation needed.
1999-08-26regress/exchange/def-i.1: Merge with EOMNiklas Hallqvist
regress/exchange/def-r.1: Merge with EOM apps/certpatch/certpatch.c: Merge with EOM 1.2
1999-08-26Merge with EOM 1.58Niklas Hallqvist
author: niklas Support dynamic loading of libkeynote too. Build isakmpd static by default. Stylistic cleanup of keynote policy code. Correct some libcrypto calls. author: angelos Complete policy work; tested for the shared-key case. Documentation needed. author: niklas Add support for dynamic loading of optional facilities, libcrypto first.
1999-08-26regress/asn/.cvsignore: Ignore meNiklas Hallqvist
regress/b2n/.cvsignore: Ignore me regress/crypto/.cvsignore: Ignore me regress/dh/.cvsignore: Ignore me regress/ec2n/.cvsignore: Ignore me regress/exchange/.cvsignore: Ignore me regress/group/.cvsignore: Ignore me regress/hmac/.cvsignore: Ignore me regress/pkcs/.cvsignore: Ignore me regress/prf/.cvsignore: Ignore me regress/rsakeygen/.cvsignore: Ignore me regress/x509/.cvsignore: Ignore me apps/certpatch/.cvsignore: Ignore me .cvsignore: Ignore me
1999-08-26Merge with EOM 1.3Niklas Hallqvist
author: angelos Revert order of handling KE/NONCE and IDs, such that we can use the ID to lookup for the shared secret...
1999-08-26Merge with EOM 1.31Niklas Hallqvist
author: angelos Document the ID section/tag for Phase 1 exchanges.
1999-08-26Merge with EOM 1.4Niklas Hallqvist
author: niklas typo author: niklas Support dynamic loading of libkeynote too. Build isakmpd static by default. Stylistic cleanup of keynote policy code. Correct some libcrypto calls.
1999-08-26Merge with EOM 1.7Niklas Hallqvist
author: ho Don't build w/o crypto support author: niklas Add support for dynamic loading of optional facilities, libcrypto first.
1999-08-26Merge with EOM 1.21Niklas Hallqvist
author: niklas Support dynamic loading of libkeynote too. Build isakmpd static by default. Stylistic cleanup of keynote policy code. Correct some libcrypto calls. author: angelos Complete policy work; tested for the shared-key case. Documentation needed. author: ho Compile without USE_LIBCRYPTO and HAVE_DLOPEN. author: niklas Add support for dynamic loading of optional facilities, libcrypto first.
1999-08-26ike_phase_1.c: Merge with EOM 1.8Niklas Hallqvist
message.c: Merge with EOM 1.135 message.h: Merge with EOM 1.48 sa.c: Merge with EOM 1.97 sa.h: Merge with EOM 1.53 author: angelos Complete policy work; tested for the shared-key case. Documentation needed.
1999-08-25Fix usage message, fix flow logic.Angelos D. Keromytis
1999-08-21MIPS boxes that use fdisk need an MS-DOS partitionNiklas Hallqvist
1999-08-21First step to get support for keypad and function keys on sparc. -mojMats O Jansson
1999-08-20spellingTheo de Raadt
1999-08-17More <sys/file.h> vs. <fcntl.h> and open() flags fixes.Todd C. Miller
1999-08-16we need to include sys/wait.h since we use waitpid hereArtur Grabowski
1999-08-16add a missing strerror. (there was already a %s in the format string)Artur Grabowski
1999-08-14Add -c flag that uses DIOCRLDINFO to clear (and update) the in-core label.Todd C. Miller
1999-08-13microseconds; vax@linkdead.paranoia.comTheo de Raadt
1999-08-10call DIOCRLDINFO after writing an MBRTheo de Raadt
1999-08-10must be external interface. Why do people keep adding stuff to the FAQTheo de Raadt
and not putting it into the man pages? What's the point of that?
1999-08-06uid_t and gid_t, and use %uTheo de Raadt
1999-08-05Merge with EOM 1.2Niklas Hallqvist
author: niklas EOM RCS Id author: niklas New regression test of exchanges, with timed events =============================================================================
1999-08-05Merge with EOM 1.93Niklas Hallqvist
author: niklas Fix no ID in QM, when acting as responder, bug author: niklas Fix bad size computation in last commit author: niklas Make ID-less QM really work. Forgot to allocate space for the fake ID payloads.
1999-08-05TO-DO: Merge with EOM 1.43Niklas Hallqvist
BUGS: Merge with EOM 1.32 author: niklas Up-to-date
1999-08-05Merge with EOM 1.5Niklas Hallqvist
author: niklas typo
1999-08-05regress/exchange/README: Merge with EOM 1.1Niklas Hallqvist
regress/exchange/mm-1-setup.sh: Merge with EOM 1.1 regress/exchange/mm-i-1.t: Merge with EOM 1.1 regress/exchange/mm-r-1.t: Merge with EOM 1.1 author: niklas New regression test of exchanges, with timed events =============================================================================
1999-08-05Merge with EOM 1.38Niklas Hallqvist
author: niklas Fix no ID in QM, when acting as responder, bug
1999-08-05Merge with EOM 1.4Niklas Hallqvist
author: niklas Moving the PRIVKEY tag into the X509-certificates section, renaming it to Private-key. Also rename the keynote policy file. author: niklas From Niels Provos, edited by me: certificate support using SSLeay
1999-08-05DESIGN-NOTES: Merge with EOM 1.47Niklas Hallqvist
conf.c: Merge with EOM 1.19 conf.h: Merge with EOM 1.10 ui.c: Merge with EOM 1.34 author: niklas Dynamic updates of the configuration database is now possible, either through ui, or through the new conf_* API described in DESIGN-NOTES
1999-08-05Merge with EOM 1.36Niklas Hallqvist
author: niklas regrand is in util.h now. Use new conf_reinit API at SIGHUP time. Fix timeout handling in deteerministic mode.
1999-08-05Merge with EOM 1.6Niklas Hallqvist
author: niklas Fix isakmpd path
1999-08-05regress/rsakeygen/Makefile: Merge with EOM 1.5Niklas Hallqvist
sysdep/openbsd/sysdep.c: Merge with EOM 1.8 cookie.c: Merge with EOM 1.21 util.c: Merge with EOM 1.15 util.h: Merge with EOM 1.7 author: niklas Move regrand var to util.c, and get the decl from util.h, do not update the cookie secret if in deterministic mode.
1999-08-05Add 'ipsecadm flush' to do what 'route flush -encap' doesn't manage.Hakan Olsson
Sync manpage and fix a couple of typos.
1999-07-30A better, but still not perfect, merge of raidctl(8)Peter Galbavy
1999-07-30Update RAIDframe from NetBSD-current as of 1999/07/26.Peter Galbavy
Please note that you *must* follow the upgrade instructions at http://www.cs.usask.ca/staff/oster/clabel_upgrade.html before installing the new raidctl and new kernel using this code.
1999-07-29Modified 'route flush' default behaviour to skip '-encap' (PF_KEY) flows,Hakan Olsson
as deleting these will leave the SPIs behind. 'route flush -encap' will still delete the flows. 'ipsecadm' should do this, and properly. PF_KEY/AF_KEY nitpick. Sync man page. Add ref to ipsecadm(1).
1999-07-28qualifers is a typo.Marc Espie
synch with man page, which speaks of modifiers anyway.
1999-07-25fix ipnat to not require -vHugh Graham
1999-07-23Remove way obsolete codeNiklas Hallqvist
1999-07-23fix -n to work with verbose mode. ipnat -nvf will now show the parsed rulesKjell Wooding
without processing them.
1999-07-23default map is now selected by the keyboard id. If current keyboard id don'tMats O Jansson
have a map, use the first keyboard map as default (us). -moj
1999-07-23doc -fTheo de Raadt
1999-07-22align collumnsTheo de Raadt
1999-07-21describe the -f flag in the options listAaron Campbell
1999-07-21discuss the "-m mode" optionAaron Campbell
1999-07-21use .Ar after .It Fl where it looks niceTheo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-29 11:31:50 +0000