summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2001-07-05&, not &&. Pointed out by dhartmei@.Hakan Olsson
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05Add d2i_X509_NAMEAngelos D. Keromytis
2001-07-05Document ASN1 DN.Angelos D. Keromytis
2001-07-05DER_ASN1_DN ID handling --- untestedAngelos D. Keromytis
2001-07-05On closer inspection, freeing the X509 names is bad. I should stopAngelos D. Keromytis
coding late while half-asleep.
2001-07-05Free X509 names in case of failure and when done.Angelos D. Keromytis
2001-07-05clarify -a. sync with kameJun-ichiro itojun Hagino
2001-07-05build iopctl on alpha, i386, powerpcMichael Shalayeff
2001-07-05controlling utility for iop(4)Michael Shalayeff
2001-07-04cleanerTheo de Raadt
2001-07-04Merge entries.Angelos D. Keromytis
2001-07-04Better handling of Key IDs.Angelos D. Keromytis
2001-07-04Some text on KEY_ID payloads.Angelos D. Keromytis
2001-07-04add new icmp codes and types as symbolic names, ok deraadtPeter Stromberg
2001-07-04do not pick a fightTheo de Raadt
2001-07-04Better IPv6/IPv4 integrationNiklas Hallqvist
2001-07-04IPv6Niklas Hallqvist
2001-07-04link to portal.conf.5; dead karls@inet.noTheo de Raadt
2001-07-03Fix policy information for IPv6 subnet/range cases. This is ugly, I'llAngelos D. Keromytis
have to find another way of dealing with IPv6 addresses.
2001-07-03sync set_spi with netbsd (fixes typo).Markus Friedl
2001-07-03Put missing \n's in som error messages; consolidate redundant "if" (OK theo@).Ian Darwin
2001-07-03strlcpy->strncpy for nowMarkus Friedl
2001-07-03Missed a few style fixes...Hakan Olsson
2001-07-03Document -q option. Some style fixes. dhartmei@ ok.Hakan Olsson
2001-07-03Add a -q (quiet) option. dhartmei@ ok.Hakan Olsson
2001-07-03Wait with strlcpy a while, change to strncpy.Hakan Olsson
2001-07-03use strlcpy instead of memcpy to copy stringsHakan Olsson
2001-07-03Slightly more verbose error messages.Hakan Olsson
2001-07-02No, do NOT build them on everythingTheo de Raadt
2001-07-02Typo.Hakan Olsson
2001-07-02#include <string.h> to get mem* prototypes.Todd C. Miller
2001-07-02make the alpha happyTheo de Raadt
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not ↵Daniel Hartmeier
filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@
2001-07-01Appeared in 3.0, not 2.9; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Remove warnings from non-DDEBUG case; angelos told me.Niklas Hallqvist
2001-07-01ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation.Niklas Hallqvist
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw.
2001-07-01strtol strictness. Style. Do not use dst end on an unconnected socket.Niklas Hallqvist
This should fix the IPv6 work for this round, There has been code by ho@ too in most my recent commits, we did this on Boston Logan airport, on our way home from !c2k1, the OpenBSD hackathon.
2001-07-01More Style police, but also sane checking of addressNiklas Hallqvist
family vs stated ID-type.
2001-07-01strict strtol checking. text2sockaddr/sockaddr2text implementationsNiklas Hallqvist
for systems without get{addr,name}info calls. Some style police.
2001-07-01StyleNiklas Hallqvist
2001-07-01Style policeNiklas Hallqvist
2001-07-01Regression test for isakmpd utility functions, initially just text2sockaddr.Niklas Hallqvist
2001-07-01Start support for IPv6 addresses in policy.Angelos D. Keromytis
2001-07-01Set size correctly for IPv6 Phase 1 IDs.Angelos D. Keromytis
2001-07-01Debug information for IDs.Angelos D. Keromytis
2001-07-01Return the right length for address IDs.Angelos D. Keromytis
2001-07-01Add port ranges to the rdr directive. Connections can be redirectedKjell Wooding
to either a range of the same size, or a single port. Redirects between ranges of different sizes are not supported. Eg: rdr dc0 10.0.0.0/24 port 60000:61000 -> 127.0.0.1 port 65530:* proto udp rdr xl0 0.0.0.0/0 port 6660:6669 -> 127.0.0.1 port 6667 proto tcp This replaces the wildcard port patch (when port = 0), as it should no longer be necessary. ok dhartmei@
2001-07-01Always print filter statistics, even when the filter is disabled.Kjell Wooding