summaryrefslogtreecommitdiffstats
path: root/sbin/isakmpd/conf.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Support DH groups 19 to 21 and 25 to 30, just like iked(8) does.mpi2017-10-271-5/+9
* More "(<blah> *)0" -> NULL, avoiding any stdarg functions.krw2016-03-161-2/+2
* Remove plain DES encryption from IPsec.naddy2015-12-091-7/+7
* <stdlib.h> is included, so do not need to cast result fromderaadt2015-08-201-10/+7
* Whole bunch of (unsigned char) casts carefully added for ctype calls.deraadt2013-11-221-5/+5
* remove excessive includesderaadt2013-03-211-2/+2
* Support additional MODP DH groups in the Phase 1 and Phase 2.mikeb2012-07-131-3/+4
* enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESPnaddy2012-06-301-2/+7
* Support for use of AES-GCM-16 (as AESGCM) and ENCR_NULL_AUTH_AES_GMACmikeb2010-09-221-8/+23
* fixup keylength for aes-128-cbc in quickmodederaadt2010-08-041-2/+2
* Define default configurations for AES-192 and AES-256. From Mitja Muzenichshoexer2008-02-171-8/+23
* Let conf_trans_node() set all parts of the node, so that we don'tmoritz2007-06-011-70/+26
* Free allocated node in conf_set_now() before failing,moritz2007-04-221-4/+2
* There's no point in checking ptr for NULL before doing free(ptr)moritz2007-04-161-45/+23
* isakmpd bits for ESP+NULL encryption. This is useful, when AH canhshoexer2007-02-191-3/+3
* Properly define quick mode suites for AH. With naddy.hshoexer2006-08-291-6/+22
* Make deletion of SAs on shutdown optional. The default behaviourhshoexer2006-06-101-1/+3
* Allow isakmpd to use a different private rsa key per isakmp ID. Hans wrote this a long time ago, I synced it to -current and tested.msf2006-06-101-1/+3
* This shouldn't have been commited yet.hshoexer2006-06-101-3/+1
* support sha2 for main mode hmacs and aesctr for quick mode encryption.hshoexer2006-06-101-10/+19
* add group15/modp3072 to default configurations.hshoexer2006-05-271-5/+6
* remove some unused functions and an unused variable found by lint.hshoexer2005-12-281-86/+1
* use snprintf; ok cloder. also looked at by a few other peoplederaadt2005-11-141-15/+6
* Make sure to always load at least the default configuration values. Fixes ahshoexer2005-08-021-10/+10
* Handle strdup returning NULL. OK hshoexercloder2005-05-261-4/+22
* Make deterministic randomness (only ever used for testing) a compile-timecloder2005-04-081-3/+1
* keynote and policy always compiled inderaadt2005-04-081-3/+1
* un-ifdef USE_BLOWFISHderaadt2005-04-081-2/+2
* knf, ok cloderderaadt2005-04-061-3/+3
* Always compile X509 support. Almost everyone uses it. Makes the codecloder2005-04-051-3/+1
* spacing; ok cloderderaadt2005-04-041-3/+3
* reset config line numbers, when daemon gets reinitialized.moritz2005-03-151-6/+5
* Avoid memory leak if strdup should fail.cloder2005-03-101-3/+7
* Allow the Address, Network, or Netmask values of the <IPsec-ID> to bemcbride2004-12-141-2/+2
* spacingderaadt2004-08-081-4/+4
* Less noise while debugging.ho2004-07-291-5/+5
* Keynote policy checking can now be disabled by "-K" switch and config taghshoexer2004-06-251-1/+2
* avoid stat before openhshoexer2004-06-141-14/+12
* KNF, style, 80c, etc. hshoexer@ okho2004-06-141-8/+11
* Style nits. hshoexer@ okho2004-06-091-2/+2
* Some more KNF, no binary change.hshoexer2004-05-141-129/+135
* Make sure KEY_LENGTH attribute is present when checking AES proposals,ho2004-04-231-172/+130
* more knf; ok hshoexerderaadt2004-04-151-104/+118
* knfderaadt2004-04-151-47/+51
* partial move to KNF. More to come. This has happened because therederaadt2004-04-151-896/+867
* Add missing bits to make already present privsep code work. Enable privsep.hshoexer2004-03-191-2/+2
* Add group 14 (modp2048) to predefined suites. Manpage also updated.hshoexer2004-02-271-5/+5
* small typos fixed.hshoexer2004-01-061-5/+6
* A couple of nits. deraadt@ ok.ho2003-09-021-2/+2
* support AES in phase 1, too. switch to OpenSSL EVP interface;markus2003-08-281-3/+3