summaryrefslogtreecommitdiffstats
path: root/sbin/isakmpd
AgeCommit message (Expand)AuthorFilesLines
2021-02-11Link isakmpd dynamically. Mount /usr on NFS via IPsec does notbluhm1-2/+4
2021-01-28Extern transport_list. Fixed compilation with -fno-common.mortimer2-3/+6
2020-07-07Fix shared DH secret length in log message.tobhe1-2/+2
2020-01-24Fix isakmpd monitor process to use the exit status of main processyasuoka1-3/+8
2019-12-19The previous fix for creating isakmpd(8) IKE pcap file, weakenedbluhm1-8/+30
2019-12-10If a file or directory component does not exists, realpath(3) returnsbluhm1-4/+3
2019-11-29Change the default security level for incoming IPsec flows fromtobhe1-3/+2
2019-11-14Do not print misleading error message about permission error forbluhm1-13/+6
2019-08-30mop up for the pcap.3 rename;jmc1-4/+4
2019-07-03snprintf/vsnprintf return < 0 on error, rather than -1.deraadt1-3/+3
2019-06-28When system calls indicate an error they return -1, not some arbitraryderaadt6-15/+15
2019-02-19oops, bad Pp snuck in;jmc1-3/+2
2019-02-18Rework the certificate generation examples a bit:sthen1-13/+19
2019-01-22PF_ROUTE -> AF_ROUTE in the scattered sock()/setsockopt() callskrw1-2/+2
2018-09-20add missing braces implied by indentationjsg1-2/+3
2018-04-17Document how to avoid isakmpd(8) source IP address pitfalls by usingstsp2-6/+18
2018-01-15Spacing, no object change.mpi20-89/+89
2018-01-04space -> tabmpi20-111/+111
2017-12-07Set the correct ENCAPSULATION_MODE when doing NAT-T.mpi1-4/+36
2017-12-05Use clock_gettime(CLOCK_MONOTONIC) to schedule timersjca13-80/+81
2017-11-23in isakmpd(8), provide a hint: from scott chelohajmc1-5/+4
2017-11-08In the final RFC 5903 the computation for the DH shared secret changed.patrick7-31/+76
2017-10-27Support DH groups 19 to 21 and 25 to 30, just like iked(8) does.mpi4-15/+34
2017-09-18Check for failures of exchange_establish_p{1,2}() and call the givenmpi2-34/+57
2017-08-22Remove listing of fixed bugs.mpi1-49/+1
2017-08-06Prevent a use-after-free by always passing dynamically allocatedmpi2-7/+18
2017-07-18Prevent a NULL dereference when comparing incomplete SAs.mpi1-1/+10
2017-07-10remove misc. depend and yacc nits that no longer matter.espie1-2/+2
2017-07-03Generate source and header files for regress on demand.bluhm1-2/+3
2017-06-16mark files as BUILDFIRST, or write explicit dependencies, so that mostespie1-1/+3
2017-04-02Check return value of asprintf(), and don't use 0 as a char *tom1-10/+10
2017-02-28Depending on the addresses, ipsecctl(8) automatically groups sabluhm1-3/+3
2017-02-03Stop assuming that in_{addr,port}_t are typedefed in <sys/types.h> andguenther5-5/+11
2017-01-04Remove modular exponential groups specified in RFC5114mikeb1-63/+1
2017-01-01Hyphenate compound adjectives 'up-to-date', 'out-of-date' and 'well-known'tb1-4/+4
2016-09-03A commented block starts withderaadt1-6/+1
2016-09-02move links from http to https://www.openbsd.org/tb1-2/+2
2016-08-26Pull in <sys/select.h> for fd_setguenther1-1/+2
2016-04-04Fix memory leak. Call proto_free() always to free proto.yasuoka1-6/+4
2016-04-02Another use for fcntl() and thus of the superfluous 3rd parameterkrw1-4/+27
2016-03-16More "(<blah> *)0" -> NULL, avoiding any stdarg functions.krw1-2/+2
2016-03-10Don't retransmit responses for unauthenticated messages.yasuoka3-4/+18
2016-03-05fix steps for cert creation;jmc1-5/+13
2016-02-29Print ssize_t with %zd; ok deraadt@ mmcc@jca1-5/+4
2016-01-11typo fix; from julian hsiaojmc1-3/+3
2016-01-08tweak; from julian hsiaojmc1-3/+3
2015-12-10Remove NULL-checks before free(). ok tb@mmcc6-20/+13
2015-12-09Remove plain DES encryption from IPsec.naddy6-154/+19
2015-10-15A classic case for bzero() -> explicit_bzero()mmcc1-2/+2
2015-09-25drop useless .Xo and .Bk, and shorten by avoiding some .Smschwarze1-81/+14