summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2000-10-08update DNS label length validation. check inet_ntop() errors. sync with kame.Jun-ichiro itojun Hagino
2000-10-07Merge with EOM 1.133Niklas Hallqvist
author: niklas style and < that should be <= author: angelos If the initiator does not propose a Phase 2 ID, use the local/peer addresses as implicit IDs; this was supported on the responder side, but weirdly enough not on the initiator. Reported by itojun@ author: angelos Handle 32-bit lifetimes (in generating them). author: ho (c)-2000 author: provos style as pointed out by the code style pedant. author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07Merge with EOM 1.56Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: angelos No need to delete SPIs, they'll just expire. author: provos style as pointed out by the code style pedant.
2000-10-07Merge with EOM 1.16Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: ho Read in FEATURES for proper operation author: angelos No need for NODEBUG. author: angelos Use NODEBUG compile flag, so policy.c doesn't barf.
2000-10-07Merge with EOM 1.4Niklas Hallqvist
author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...>
2000-10-07Merge with EOM 1.43Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: provos style as pointed out by the code style pedant. author: ho Compile without USE_KEYNOTE/USE_POLICY.
2000-10-07Merge with EOM 1.155Niklas Hallqvist
author: niklas style author: niklas spelling author: ho (c)-2000 author: niklas style author: provos fail if exchange can not be created author: angelos Invalid payload may be because of passphrase mismatch, so warn about that. author: provos reference to freed object, move free down author: ho log_debug -> LOG_DBG (USE_DEBUG) author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07conf.h: Merge with EOM 1.13Niklas Hallqvist
gmp_util.c: Merge with EOM 1.7 isakmpd.conf.5: Merge with EOM 1.47 author: ho (c)-2000
2000-10-07Merge with EOM 1.45Niklas Hallqvist
author: angelos Unsigned integers for most attributes. author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...> author: angelos Typo on checking esp lifetimes. author: angelos Use the correct protocol from the IDi/IDr.
2000-10-07Merge with EOM 1.28Niklas Hallqvist
author: niklas Obsolete commentary
2000-10-07Merge with EOM 1.16Niklas Hallqvist
author: itojun need string.h for netbsd/alpha
2000-10-07Merge with EOM 1.14Niklas Hallqvist
author: ho Add USE_KEYNOTE if policy feature is active
2000-10-07Merge with EOM 1.42Niklas Hallqvist
author: ho ipsec_decode_ids is only used with USE_DEBUG
2000-10-07Merge with EOM 1.16Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...>
2000-10-07Merge with EOM 1.36Niklas Hallqvist
author: niklas Remove some spaces author: niklas do not crash on empty config files author: ho (c)-2000 author: provos style as pointed out by the code style pedant. author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07Merge with EOM 1.9Niklas Hallqvist
author: niklas Style author: ho Nowadays we can use #include <openssl/...> instead of <ssl/...>
2000-10-07Merge with EOM 1.132Niklas Hallqvist
author: niklas style author: angelos Make sure the LIFE_DURATION length is 2 or 4 bytes (we don't handle anything else, although we could extend it to handle anything up to 8 bytes). author: provos dont crash when isakmp sa keystate = 0; happens when encountering high packet loss. author: ho ipsec_decode_ids is only used with USE_DEBUG author: provos style as pointed out by the code style pedant. author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07isakmp_doi.h: Merge with EOM 1.1Niklas Hallqvist
isakmpd.c: Merge with EOM 1.54
2000-10-07Merge with EOM 1.30Niklas Hallqvist
author: niklas no need for sysdep.h in here. This promotes reuse of the log module in other environments author: ho (c)-2000
2000-10-07Merge with EOM 1.26Niklas Hallqvist
author: ho pconn variable only used with USE_DEBUG author: ho NetBSD wants <sys/socket.h> for AF_INET def.
2000-10-07Merge with EOM 1.28Niklas Hallqvist
author: niklas style and < that should be <= author: angelos Handle 32-bit lifetimes (in generating them). author: ho Use log_print() instead of log_error here, no errno here.
2000-10-07Merge with EOM 1.46Niklas Hallqvist
author: niklas style author: angelos No reserved1 field anymore. author: angelos Begining of ACQUIRE support. author: angelos No need to delete SPIs, they'll just expire. author: angelos Only play with flows if we're using the "old" IPsec code (the new kernel code to be committed).
2000-10-07Merge with EOM 1.132Niklas Hallqvist
author: niklas style author: ho (c)-2000 author: provos proper reference counting for isakmp_sa in struct message, remove bogus calls to sa_reference; fix some more memory leaks in conf.c
2000-10-07Merge with EOM 1.42Niklas Hallqvist
author: provos remove previous timeout if adding a new one
2000-10-07Merge with EOM 1.43Niklas Hallqvist
author: niklas missing arg author: ho (c)-2000
2000-10-07Merge with EOM 1.77Niklas Hallqvist
author: niklas Add back an example of empty FEATURES author: niklas Well, show how to add -g in different OSes author: itojun make -g really work author: ho Revert. Features should not depend on other stuff, it should be the other way around. author: ho Ok, make it work this time. author: ho Only add 'policy' feature if USE_KEYNOTE is active.
2000-10-07cert.c: Merge with EOM 1.18Niklas Hallqvist
cert.h: Merge with EOM 1.8 libcrypto.c: Merge with EOM 1.14 policy.h: Merge with EOM 1.12 x509.h: Merge with EOM 1.11 author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking.
2000-10-07Merge with EOM 1.50Niklas Hallqvist
author: niklas alphabeticize
2000-10-06typoNiklas Hallqvist
2000-10-06Avoid fd_set overflow. (just like in ping).Artur Grabowski
2000-09-30Some format string problems that were missed during initial audit; deraadt@ andAaron Campbell
millert@ ok
2000-09-29Update.Angelos D. Keromytis
2000-09-29Update for no -spi use with flowAngelos D. Keromytis
2000-09-26Some corrections from cd@sentia.nl.Aaron Campbell
2000-09-25docutment path mtu discoveryNiels Provos
2000-09-24If the route add/delete fails exit w/ 1 instead of 0Todd C. Miller
Remove register decls and make return foo vs. return (foo) consistent.
2000-09-22If a cylinder group won't fit inside of one block, adjust secpercylTodd C. Miller
and ntracks until it does, if possible. This allows one to newfs disks with funky (usually BIOS-generated) geometries without cranking the block size. This is really just a hack and a better solution would be to fake the geometries of zone-recorded disks since secpercyl is never accurate in that case anyway...
2000-09-21Send correct lengths for srcid/dstid.Angelos D. Keromytis
2000-09-21Allocate memory for srcid/dstid.Angelos D. Keromytis
2000-09-20srcid/dstid/srcid_type/dstid_type flags for flows.Angelos D. Keromytis
2000-09-19Manually merge some changes from EOM.Angelos D. Keromytis
2000-09-19Add some explanatory text about the group operation.Angelos D. Keromytis
2000-09-19Re-add support for SA bundles.Angelos D. Keromytis
2000-09-19No reserved1 field in sprotocol structure any more.Angelos D. Keromytis
2000-09-19Update.Angelos D. Keromytis
2000-09-19Update to use the new framework.Angelos D. Keromytis
2000-09-18avoid alias against libc symbol dirname (binutils is so great)Theo de Raadt
2000-09-17Mention kern.usermount and the fact that a mount point has to be anPaul Janzen
existing directory.
2000-09-14wrong type to ioctl; naddy@mips.inka.deTheo de Raadt
2000-09-12handle LBA extended partitions here too; scott@nts.umn.eduTheo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 20:13:48 +0000