summaryrefslogtreecommitdiffstats
path: root/sbin/isakmpd/sysdep/openbsd (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Spacing, no object change.mpi2018-01-151-2/+2
|
* space -> tabmpi2018-01-041-4/+4
| | | | No object change.
* improve randomization. remove some junk debugging features that arederaadt2014-01-221-3/+1
| | | | | fundamentally broken. ok jsing mikeb
* Userland programs should include <errno.h> not <sys/errno.h>millert2005-12-211-2/+2
| | | | OK deraadt@
* clean up KEY_API() wrapper.hshoexer2005-05-041-85/+3
| | | | ok ho@
* get rid of sysdep_sa_lenhshoexer2005-04-081-8/+1
| | | | ok cloder@
* Make deterministic randomness (only ever used for testing) a compile-timecloder2005-04-081-14/+1
| | | | | | | | option. Reduces chances of somehow setting regrand when it's not supposed to be set. Remove "-r" option from man page. Also xref certpatch(8) while we are in there. And remove some include sysdep.h where it is no longer needed. OK hshoexer
* forget about sysdep/openbsd/sysdep-os.hderaadt2005-04-081-35/+0
|
* remove more conditional crudderaadt2005-04-082-42/+1
|
* zap USE_DEFAULT_ROUTEhshoexer2005-04-081-2/+2
|
* not needed anymorederaadt2005-04-081-82/+0
|
* old static lib stuff is not even needed...deraadt2005-04-081-10/+1
|
* privsep alwaysderaadt2005-04-081-52/+0
|
* the lovely thing about layers and layers of compatible stuff, is thatderaadt2005-04-081-2/+2
| | | | | | deep down in the guts of it assumptions such as "this particular processors has no shared libraries yet" get hidden, only to be found about 2 years later. i hate code that hides stuff like that from me.
* kill HAVE_PCAPderaadt2005-04-081-3/+1
|
* kill HAVE_CLOSEFROMderaadt2005-04-081-2/+1
|
* kill HAVE_GETIFADDRSderaadt2005-04-081-2/+2
|
* kill USE_OLD_SOCKADDRderaadt2005-04-081-8/+1
|
* app.cderaadt2005-04-081-16/+1
|
* sysdep_progname() is non-portable gunkderaadt2005-04-081-8/+1
|
* remove portable stuff not neededderaadt2005-04-081-55/+1
|
* Allow the Address, Network, or Netmask values of the <IPsec-ID> to bemcbride2004-12-141-2/+2
| | | | | | | | | | | | specified with an interface name (in which case the first address is used) or the keyword 'default' (in which case the address is selected based on the default route). eg: [roadwarrior-ip] ID-type= IPV4_ADDR Address= default ok ho@ hshoexer@
* Better implementation of the Dead Peer Detection protocol, RFC 3706.ho2004-08-101-1/+10
| | | | hshoexer@ ok.
* Narrow down privsep interface. Move pf_key_v2_open() to monitor.hshoexer2004-06-261-1/+5
| | | | | | Work in progress. ok ho@
* Remove -DHAVE_GETNAMEINFO frome makefiles.mcbride2004-06-262-5/+3
| | | | Pointed out by ho@
* partial move to KNF. More to come. This has happened because therederaadt2004-04-152-137/+129
| | | | | | are a raft of source code auditors who are willing to help improve this code only if this is done, and hey, isakmpd does need our standard auditing process. ok ho hshoexer
* Don't assume closefrom(2) exists everywhere. hshoexer@, markus@ ok.ho2004-03-311-1/+2
|
* Remove clauses 3 and 4. Approved by markus@ and niklas@.ho2003-06-035-30/+5
|
* Start of privilege separation for isakmpd.ho2003-05-151-9/+10
| | | | | There are some kinks left, so keep it default disabled for now. markus@ says ok to commit.
* signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.ho2002-09-111-2/+2
|
* The dlopen() stuff goes away.ho2002-06-102-16/+2
|
* rm trailing whitespacetodd2002-06-092-6/+6
|
* -Werror not possible, because of openssl constification. thanks guysderaadt2002-03-051-2/+2
|
* Add sysdep_sa_len function.ho2001-10-261-1/+8
|
* Compile on old systems, my version.niklas2001-08-231-7/+26
|
* Revert last change.ho2001-08-221-10/+3
|
* Compile on older systems.ho2001-08-221-3/+10
|
* IPCOMP policy control should be optional for backwardniklas2001-08-221-3/+5
| | | | compatibility.
* Bypass IPCOMP too.niklas2001-08-221-6/+15
|
* use getifaddrs(3) rather than SIOCGIFCONF. in fact, if_map() does not doitojun2001-08-131-2/+2
| | | | | the right thing on certain set of interface addresses. SIOCGIFCONF is the worst possible ioctl API...
* #(endif|else) foo is incorrect, make it #endif /* foo */heko2001-08-121-2/+2
| | | | deraadt@ ok
* styleniklas2001-07-061-5/+5
|
* Remove support for PF_ENCAP (deprecated since OpenBSD2.5).ho2001-07-061-5/+1
|
* setsockopt flags needs to be IPv6 awareho2001-06-291-15/+41
|
* On OpenBSD, we want -Werror.ho2001-06-291-2/+2
|
* Get rid of redundant lengths in get_spi API.ho2001-06-291-5/+3
|
* More sa_len usage.ho2001-06-291-2/+3
|
* Make our pfkeyv2.h more RFC2367 compliant. Also fix some backwardsniklas2001-06-051-4/+26
| | | | | compatibility problems in isakmpd, at least 2.8 stable can compile current isakmpd now. angelos@ ok
* Adhere to the new set_spi prototype.angelos2001-05-051-3/+4
|
* isakmpd can now capture un-encrypted IKE negotiation packets to aho2001-04-091-2/+2
| | | | | | file. In pcap(3) format, so tcpdump(8) can read it. Idea by Tim Newsham <newsham@lava.net>, work by him and me. Ok angelos@, niklas@
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.