summaryrefslogtreecommitdiff
path: root/usr.sbin/bgpd
AgeCommit message (Collapse)Author
2004-05-04remove unused var; henning okTheo de Raadt
2004-05-04Correctly plug the memory leak and fix a error message.Claudio Jeker
2004-05-03little KNF issueHenning Brauer
2004-04-30remove MAX_PREFIX_PER_AS debug gunk, claudio djm okHenning Brauer
2004-04-30plug memory leaks; henning okTheo de Raadt
2004-04-30spellingTheo de Raadt
2004-04-29sock -> fd; ok henningTheo de Raadt
2004-04-28rename sock to fdTheo de Raadt
2004-04-28Pointer that are used later in the code should be initalized. Fixes a crashClaudio Jeker
noticed by Henning. OK henning@
2004-04-28if a peer follows the extremely misgiuded path that the RFCs just barely allowHenning Brauer
to send a NOTIFICATION and thus ternminating the session when it sees a capability it doesn't support (who would guess: zebra does so), parse the data section of the notifcication to find out what what capabilties it didn't like and do not advertise them the next time the session gets up. In case we get a notification about unsupported capabilities with an empty data part (don't ask for RFCs... and guess who does that), disable capabilty announcement alltogether. claudio ok
2004-04-28FILE * leak; henning ja ja ja jaTheo de Raadt
2004-04-28support for AH flows and SAsMarkus Friedl
2004-04-28Unbreak the stuff that I commited first that was totaly broken. OK henning@Claudio Jeker
2004-04-28allow ah/esp spec with IKE, markus okHenning Brauer
2004-04-28do not give up on ESRCH, someone might have mucked with ipsecadm behindHenning Brauer
our back, markus ok
2004-04-28make this at least compileHenning Brauer
2004-04-28make sure send and reply are in sync; ok henningMarkus Friedl
2004-04-28Enable route refresh in the RDE. Now peer can request route refreshes.Claudio Jeker
OK henning@
2004-04-28keep track of which ipsec/md5 SAs we inserted - ESRCH on blind removalHenning Brauer
otherwise, markus ok
2004-04-28prevent multiple auth methods to be specifiedHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28remove XXX that is wrongTheo de Raadt
2004-04-28spacingHenning Brauer
2004-04-28don't load SAs into the kernel if IKE is used.Markus Friedl
2004-04-28prefix the auth related defines by AUTH_, we had a name clash, markus okHenning Brauer
2004-04-27teach printconf about all this shiny new ipsec stuffHenning Brauer
2004-04-27set conf.auth.methodod for md5, tooMarkus Friedl
2004-04-27ike before inHenning Brauer
2004-04-27rename the ipsec struct to auth, move all tcpmd5 related fields in there, andHenning Brauer
add a generic "method" field that expresses what method (none/md5sig/ipsec manual/ipsec ike) is in use markus ok
2004-04-27parser parts for ipsec ike, markus okHenning Brauer
2004-04-27two missing breaks, repairs tcpmd5, with markusHenning Brauer
2004-04-27restrict the ipsec flows to BGP only; ok henningMarkus Friedl
2004-04-27unbreak^2Henning Brauer
2004-04-27repairHenning Brauer
2004-04-27crud stripping; henning okTheo de Raadt
2004-04-27do the errno ERANGE dance around a strtol; henning okTheo de Raadt
2004-04-27announce route refresh capability, and parse announced route refresh capaHenning Brauer
2004-04-27initial route refresh support per RFC2918Henning Brauer
process incoming route refresh request and notify the RDE not advertised via capabilities yet, claudio ok
2004-04-27curpeer must be set back to curgroup, not NULLHenning Brauer
2004-04-26need more checks on the keysHenning Brauer
2004-04-26unbreakHenning Brauer
2004-04-26load ipsec SAs into the kernel and enable them.Markus Friedl
2004-04-26don't forget to set keylen, markusHenning Brauer
2004-04-26parser support for setting ipsec keys and such, markus okHenning Brauer
2004-04-26fix printing template neighborsHenning Brauer
2004-04-26need keylen too, markusHenning Brauer
2004-04-26structs for ipsec, with markusHenning Brauer
2004-04-26announce multiprotocol capabilities - IPv4 multicast for nowHenning Brauer
this implies ourgoing capabilities annoucnement is there and just needs the values to be filled in for other shitz we'll support soonish
2004-04-26Cleanup the decision function and take the age of the entry into account.Claudio Jeker
Prefer older, more stable entries. OK henning@
2004-04-25better error logging in parse_capabilities()Henning Brauer
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-07 16:53:33 +0000