| Age | Commit message (Collapse) | Author |
|
sorted in the list.
|
|
where purge_remote() is called. This fixes also a possible crash from the
same patch since ph1->remote can be NULL (when we are responder and config
is not yet selected).
|
|
to be proof of livelyness. This can improves things if there's random
packet delays, or if racoon is not getting enough CPU time.
|
|
This will avoid stale security associations if some of the delete
notifications happens to get lost.
|
|
select the phase1 for rekeying the new phase2.
|
|
|
|
received certificates and other information. General code clean up.
|
|
time measurements to avoid complite hang if time jumps backwards.
|
|
capabilities.
|
|
Improved Mobile IPv6 support per draft-ebalard-mext-pfkey-enhanced-migrate.
|
|
in remote conf.
|
|
allocations. Optimize scheduling algorithm to not scan all entries in
the main loop.
|
|
|
|
in last main mode exchange (delayed) and during quick mode exchanges.
|
|
compatibility is provided. Submitted by Timo Teras.
|
|
|
|
|
|
Since we previously had a release branch and we import here the HEAD of CVS,
let's assume all local changes are to be dumped. Local patches should have
been propagated upstream, anyway.
|
|
|
|
|
|
the newer software. Some useful local change might have been overwritten,
we'll take care of this soon.
|
|
|
|
Flush SA and generated SP on DPD timeout and deletion payloads
|
|
multiple SA can be used in transport mode
While I'm there, patch ipsec-tools ChangeLog to reflect the changes we
took from ipsec-tools-0_6-branch
|
|
Fix broken generated policies flush
|
|
according to ipsec-tools' ChangeLog:
2005-02-23 Emmanuel Dreyfus <manu@netbsd.org>
* configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal
support for patented algorithms: IDEA and RC5.
* src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it
is not required in the configuration
* src/racoon/isakmp.c: do not reject addresses for which kernel
refused UDP encapsulation, they can still be used for non NAT-T
traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)
2005-02-18 Emmanuel Dreyfus <manu@netbsd.org>
* src/racoon/{main.c|eaytest.c|plairsa-gen.c}
src/setkey/setkey.c: don't use fuzzy paths for package_version.h
2005-02-18 Yvan Vanhullebus <vanhu@free.fr>
* src/racoon/isakmp_inf.c: Purge generated SPDs when getting a
related DELETE_SA
* src/racoon/pfkey.c: do NOT unbindph12() when SA acquire
2005-02-17 Emmanuel Dreyfus <manu@netbsd.org>
From Fred Senault <fred.letter@lacave.net>
* src/racoon/remoteconf.c: Fix a bug in script init
2005-02-17 Yvan Vanhullebus <vanhu@free.fr>
* src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks
2005-02-15 Michal Ludvig <michal@logix.cz>
* configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN
|
|
ipsec-tools is a fork from KAME racoon/libipsec/setkey, with many
enhancements.
|