summaryrefslogtreecommitdiff
path: root/usr.sbin/sasyncd
AgeCommit message (Expand)Author
2007-01-08allow shared key specification in hex (0x01234...); ok hoMarkus Friedl
2006-12-26make option processing happen first.Mathieu Sauve-Frankel
2006-12-25good day to remove a some pooTheo de Raadt
2006-12-25spacingTheo de Raadt
2006-12-24first pass cleanup of sasyncd, based on some discussion with deraadt@Mathieu Sauve-Frankel
2006-11-28add additional link states to report the half duplex / full duplexReyk Floeter
2006-09-16Only interpret link state routing messages for the monitored carp interface.Marco Pfatschbacher
2006-09-12for apps which use interface groups, point to the section ofJason McIntyre
2006-09-01Teach sasyncd to set isakmpd into active or passive mode, accordingMarco Pfatschbacher
2006-08-31Add more SADB types to the filter: ACQUIRE, X_ASKPOLICY, REGISTER.Marco Pfatschbacher
2006-08-31Only chroot the unprivileged part of sasyncd(8).Marco Pfatschbacher
2006-08-30need to retry writing to pfkey socket on EAGAIN, ok theoHenning Brauer
2006-06-03tweaks;Jason McIntyre
2006-06-02whitespace cleanup, no binary change.Moritz Jodeit
2006-06-02Make sasyncd fail back correctly with carp preemption enabled.Ryan Thomas McBride
2006-06-01Instead of polling the carp interface to detect a switch between MASTER andRyan Thomas McBride
2006-05-26let us not talk about ipsecadm and vpn anymore; ok reykTheo de Raadt
2006-04-16cleanup error handling to avoid two memleaks. found and ok pat@Moritz Jodeit
2006-03-31Plug memory leak on error path; ok ho@ moritz@Patrick Latifi
2006-02-15remove "the the" in comment; ok jmc@David Krause
2006-01-26fix some format strings and add a missingMoritz Jodeit
2006-01-20Don't depend on implicit include of signal.hTodd C. Miller
2005-09-21IPSec -> IPsecJason McIntyre
2005-09-11handle short read()'s. fixes transferMoritz Jodeit
2005-07-19handle short reads/writes. this fixes theMoritz Jodeit
2005-07-09IP-address -> IP address;Jason McIntyre
2005-07-07when reading of sadb/spd data fails don't callMoritz Jodeit
2005-05-31minor tweaks;Jason McIntyre
2005-05-28result not used; ok hoTheo de Raadt
2005-05-28Optionally prevent syncing failover node-node SA/SPD info (master side).Hakan Olsson
2005-05-27Update, also mention pfsync integrationHakan Olsson
2005-05-27Keep sockaddr in syncpeer struct.Hakan Olsson
2005-05-27Implement SPD (IPsec flow) snapshots.Hakan Olsson
2005-05-26Document 'flushmode'Hakan Olsson
2005-05-26add a 'flushmode' to control how the master handles FLUSH to slaves. tweak so...Hakan Olsson
2005-05-26check ppidHakan Olsson
2005-05-26disable SPD snapshot for nowHakan Olsson
2005-05-26Initialize variablesHakan Olsson
2005-05-26Don't alloc/free zero-sized SADB/SPD buffers.Hakan Olsson
2005-05-24cleanup parser, permit more than one listenerHakan Olsson
2005-05-24logging tweaksHakan Olsson
2005-05-24Now that all "other" SADB_DUMP fields are zero, we don't have fix it here.Hakan Olsson
2005-05-24Remove some debugging cruft.Hakan Olsson
2005-05-24When peers connect, have the master daemon look at in-kernel SAs and feedHakan Olsson
2005-05-23wee fixes;Jason McIntyre
2005-05-23Xr and whitespace fixes;Jason McIntyre
2005-05-23Various logging fixes, handle peer disconnects better.Hakan Olsson
2005-05-23add "listen on <interface name>"Hakan Olsson
2005-05-23No more SSL. Make text somewhat clearer.Hakan Olsson
2005-05-22No more SSL between peers, instead do shared key AES & SHAHakan Olsson