crypto/dist/ipsec-tools/src/racoon/isakmp.c
Sun, 08 Feb 2009 18:42:14 +0000 snj Apply patch (requested by manu/spz in #378): netbsd-5
Fri, 15 Apr 2016 07:52:15 +0000 snj Pull up following revision(s) (requested by phx in ticket #1145): netbsd-7
Tue, 24 Jan 2017 19:23:31 +0000 christos PR/51682: Avoid DoS with fragment out of order insertion; keep fragments trunk
Wed, 09 Mar 2016 22:27:17 +0000 christos From Frank Wille: trunk
Sun, 01 Jan 2012 15:57:31 +0000 tteras From Wolfgang Schmieder <wolfgang@die-schmieders.de>: Fix various typos in trunk
Tue, 11 Oct 2011 14:50:15 +0000 tteras From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Release unused trunk
Tue, 11 Oct 2011 14:37:17 +0000 tteras From Wolfgang Schmieder <wolfgang.schmieder@honeywell.com>: setup phase1 trunk
Tue, 15 Mar 2011 13:20:14 +0000 vanhu directly call isakmp_ph1delete() instead of scheduling isakmp_ph1delete_stub(), as it is useless an can lead to memory access after free trunk
Mon, 14 Mar 2011 17:18:12 +0000 tteras Explicitly compare return value of cmpsaddr() against a return value trunk
Fri, 11 Mar 2011 14:30:07 +0000 vanhu directly delete a ph1 in remove_ph1-) instead of scheduling it, to avoid (completely ?) a race condition when reloading configuration trunk
Tue, 01 Mar 2011 14:33:58 +0000 vanhu plog text fixes, patch from M E Andersson <debian@gisladisker.se> trunk
Wed, 02 Feb 2011 15:21:34 +0000 vanhu store ph1id in an u_int32_t instead of a (signed)int. Patch from Christophe Carre trunk
Wed, 17 Nov 2010 10:40:41 +0000 tteras Fix my previous patch to not call purge_remote() twice. Change the place trunk
Fri, 12 Nov 2010 10:36:37 +0000 tteras isakmp_post_acquire is now called from admin commands too, add a flag so trunk
Fri, 12 Nov 2010 09:11:37 +0000 tteras Purge all IPsec-SA's if the last main ISAKMP-SA for the node is deleted trunk
Thu, 21 Oct 2010 06:15:28 +0000 tteras Introduce priorities for file descriptor polling mechanism and give trunk
Wed, 20 Oct 2010 13:37:37 +0000 tteras Various improvements to error log messages and a few additional error log trunk
Tue, 22 Jun 2010 09:41:33 +0000 vanhu added a specific script hook when a dead peer is detected trunk
Thu, 03 Sep 2009 09:29:07 +0000 tteras When rekeying phase2 use phase1 used to negotiate phase2 as a hint to trunk
Tue, 01 Sep 2009 09:24:21 +0000 tteras From Maik Broemme: export ISAKMP SA identity as REMOTE_ID for phase1 up trunk
Fri, 03 Jul 2009 06:41:46 +0000 tteras Get rid of the evil CMPSADDR macro. Trac #295. trunk
Fri, 03 Jul 2009 06:40:10 +0000 tteras From Yvan Vanhullebus: Use SADB_X_EXT_NAT_T_* consistently for passing the trunk
Tue, 19 May 2009 09:34:52 +0000 tteras From Jukka Salmi: Fix couple of typos from previous commit. trunk
Mon, 18 May 2009 17:40:38 +0000 tteras From Tomas Mraz: Introduce union sockaddr_any and use it to make code trunk
Mon, 20 Apr 2009 13:24:36 +0000 tteras Fix a memory leak in certificate request generation. trunk
Thu, 12 Mar 2009 23:05:27 +0000 he When casting to/from a pointer to an integral type (a bad practice, trunk
Thu, 12 Mar 2009 10:57:26 +0000 tteras Support multiple anonymous remotes and decide remoteconf based on identity, trunk
Wed, 11 Feb 2009 15:18:59 +0000 vanhu trac#301: fixed IPsec SAs flush in purge_remote() when NAT-T enabled but no NAT-T on tunnel trunk
Tue, 03 Feb 2009 20:21:45 +0000 tteras From: Phil Sutter. Fix script environment variables with IPv6 addresses. trunk
Fri, 23 Jan 2009 08:23:51 +0000 tteras Fix authentication method ambiguity by internally using unique ID and trunk
Fri, 23 Jan 2009 08:05:58 +0000 tteras Remove "fastquit" configure option and make it the default behaviour. The trunk
Tue, 23 Dec 2008 14:03:12 +0000 tteras rewrite local address detection trunk
Thu, 11 Dec 2008 15:33:59 +0000 vanhu Fixed compilation when DPD support is disabled trunk
Fri, 05 Dec 2008 06:02:20 +0000 tteras From Arnaud Ebalard: trunk
Tue, 25 Nov 2008 21:42:36 +0000 bad Do not return erroneously from isakmp_open() when setting IPV6_USE_MIN_MTU trunk
Tue, 25 Nov 2008 21:37:11 +0000 bad Keep myaddr.sock at -1 when no socket is opened. trunk
Thu, 25 Sep 2008 09:34:13 +0000 vanhu Fixed resending mechanism to have non-ESP marker for retransmitted packets trunk
Fri, 19 Sep 2008 11:14:49 +0000 tteras Implement ISAKMP SA rekeying configurable with rekey {on|off|force} option trunk
Fri, 19 Sep 2008 11:01:08 +0000 tteras Change struct sched to be allocated be the caller to avoid some memory trunk
Fri, 29 Aug 2008 00:31:37 +0000 gmcgarry Eliminate gcc-specific feature of empty structures. trunk
Tue, 12 Aug 2008 12:45:55 +0000 vanhu From Krzysztof Piotr Oledzki: Remove ph1handler if we received an invalid first exchange from initiator. trunk
Mon, 14 Jul 2008 05:40:13 +0000 tteras Clean up notification payload handling. Handle INITIAL-CONTACT notification trunk
Fri, 11 Jul 2008 08:02:06 +0000 tteras Original patch from Atis Elsts: trunk
Wed, 18 Jun 2008 07:04:23 +0000 mgrooms Set sockets to be closed on exec to avoid potential file descriptor inheritance issues. Submitted by Timo Teras. trunk
Wed, 18 Jun 2008 06:47:25 +0000 mgrooms Use utility functions to evaluate and manipulate network port values. No functional changes. Submitted by Timo Teras. trunk
Fri, 28 Mar 2008 04:18:52 +0000 manu From Cyrus Rahman: Allow interface reconfiguration when running in privilege separation mode, document privilege separation trunk
Thu, 06 Mar 2008 00:46:04 +0000 mgrooms Add the ability to initiate IPsec SA negotiations using the admin socket. trunk
Thu, 06 Mar 2008 00:34:11 +0000 mgrooms Refactor admin socket event protocol to be less error prone. Backwards compatibility is provided. Submitted by Timo Teras. trunk
Fri, 22 Feb 2008 18:50:03 +0000 manu Fix address length, from Brian Haley trunk
Fri, 11 Jan 2008 14:07:39 +0000 vanhu From Krzysztof Oledzki: Only search for established ph1 handles in DPD (also reported new getph1byaddr() arg). trunk
Wed, 19 Sep 2007 19:29:36 +0000 mgrooms Set REUSE option on sockets to prevent failures associated with closing and immediately re-opening. Submitted by Gabriel Somlo. trunk
Wed, 18 Jul 2007 12:07:49 +0000 vanhu use a single PATH_IPSEC_H to fix some path_to_ipsec.h issues trunk
Fri, 04 May 2007 09:09:47 +0000 vanhu added some debug in isakmp_chkph1there() to track some port matching problems with NAT-T trunk
Wed, 21 Mar 2007 14:29:22 +0000 vanhu NULL sched check is now done in SCHED_KILL trunk
Thu, 15 Mar 2007 10:37:44 +0000 vanhu Consider a negociation timeout when retry_counter is <=0 instead of < 0 trunk
Tue, 20 Feb 2007 09:11:30 +0000 vanhu Only delete a generated SPD if it's creation date matches the creation date of the SA we are currently deleting trunk
Mon, 19 Feb 2007 13:08:47 +0000 vanhu Removed a debug printf.... trunk
Thu, 15 Feb 2007 10:19:24 +0000 vanhu Fixed the way phase1/2 messages are sent/resent, to avoid zombie handles and acces to freed memory trunk
Mon, 02 Oct 2006 21:19:43 +0000 manu Fix memory leak (Coverity 2001), refactor the code to use port get/set trunk
Mon, 02 Oct 2006 12:04:53 +0000 manu Don't use NULL pointer (coverity 3439) trunk
less more (0) -60 tip