summaryrefslogtreecommitdiff
path: root/crypto/dist/ipsec-tools/src
AgeCommit message (Collapse)Author
2014-02-27From Adam Majer <adamm@zombino.com>: Support IPv6 in X509 subjectAltNametteras
2013-10-20remove unused variableschristos
2013-07-20Use Mt for email addresses.wiz
2013-07-19From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Export phase1tteras
remote address as Radius Calling-Station-Id.
2013-07-18add RTM_LOSING, RTM_REDIRECTchristos
2013-07-12From Sven Vermeulen <sven.vermeulen@siphos.be>: Moves ploginit() up,tteras
allowing logging events from init_avc() to show up as well.
2013-06-20Add an option --enable-wildcard-match to enable wildcard matching and explainchristos
why we might want it and why it is a bad idea in general that's why it is not enabled by default. ok tteras@, manu@
2013-06-18From Paul Barker: Remove redundant memset after calloc that caused compiletteras
failures with gcc 4.8 due to error: argument to 'sizeof' in 'memset' call is the same expression as the destination; did you mean to dereference.
2013-06-14Accept - as stdinchristos
Be nice and let the user know which file it could not open.
2013-06-03From Alexander Sbitnev <alexander.sbitnev@gmail.com>: fix admin porttteras
establish-sa for tunnel mode SAs.
2013-05-23From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Fixtteras
SADB_X_EALG_CASTCBC definition to use system definition (which differs at least on Linux). ------------------------
2013-05-08racoon default config is in /etc/racoon/racoon.confmbalmer
2013-04-12From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Do not send outtteras
illegal zero length MODE_CFG attributes.
2013-04-12Some logging improvements.tteras
2013-02-05Fix source port selectiontteras
2013-02-05From Ian West <ian@niw.com.au>: Fix double free of the radius info ontteras
config reload.
2013-01-24Fix handling of deletion notification.tteras
2013-01-08Don't derefence the directory symlink which we might be recreating.tteras
2012-12-24From Götz Babin-Ebell <g.babin-ebell@novamedia.de>: Smarter X.509 subjecttteras
name compare.
2012-12-24From Götz Babin-Ebell <g.babin-ebell@novamedia.de:tteras
Require OpenSSL 0.9.8s or higher
2012-11-30Bump date for previous.wiz
2012-11-29Added support for AES GCM 16 in phase2 negociations. Code from Christophe ↵vanhu
Carre / NETASQ
2012-08-29From Roman Hoog Antink <rha@open.ch>: Accept DPD messages with cookiestteras
also in reversed order for compatiblity. At least Cisco 836 running IOS 12.3(8)T does this.
2012-08-29From Roman Hoog Antink <rha@open.ch>: add remote's IP address to thetteras
"certificate not verified" error message.
2012-08-29From Roman Hoog Antink <rha@open.ch>: do not print unnecessary warningtteras
about non-verified certificate when using raw plain-rsa.
2012-08-15Fix make test on powermac G5. Patch from Nakano Takaharumanu
2012-02-18Bump date for previous.wiz
2012-02-18mention esp-udpdrochner
2012-02-13Use the correct constant.wiz
From FreeBSD via Henning Petersen in PR 46005.
2012-01-26Bump date for previous.wiz
2012-01-26also mention the aes-gcm ESP variantsdrochner
2012-01-10From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Enhance splitnettteras
environment variable string value generation.
2012-01-09Bump date for previous.wiz
2012-01-09allow setkey(8) set and display the ESP fragment size in the NAT-T case,drochner
userland part of PR kern/44952 by Wolfgang Stukenbrock, just changed the "frag" option name to "esp_frag", for consistency to the existing option of similar effect in racoon(8)
2012-01-04Bump date for previous.wiz
2012-01-04include <netipsec/ipsec.h> rather than <netinet6/ipsec.h> from userlanddrochner
where possible, for consistency and compatibility to FreeBSD (exception: KAME specific statistics gathering in netstat(1) and systat(1))
2012-01-04-consistently use "char *" for the compiled policy buffer in thedrochner
ipsec_*_policy() functions, as it was documented and used by clients -remove "ipsec_policy_t" which was undocumented and only present in the KAME version of the ipsec.h header -misc cleanup of historical artefacts, and to remove unnecessary differences between KAME ans FAST_IPSEC
2012-01-01From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Fix one byte tootteras
short memory allocation in isakmp_unity.c:splitnet_list_2str().
2012-01-01From Wolfgang Schmieder <wolfgang@die-schmieders.de>: Fix default NAT-Ttteras
port for listen { isakmp_natt } config directive.
2012-01-01From Wolfgang Schmieder <wolfgang@die-schmieders.de>: Fix various typos intteras
comments and log messages. Fix default port used in copy_ph1addresses().
2012-01-01Fix myaddr_getsport() to return -1 if no suitable address is found. This istteras
used in pfkey.c:pk_recvacquire() to check if IKE negotiation should be started or not.
2012-01-01Fix the previous commit.tteras
2012-01-01From Wolfgang Schmieder <wolfgang@die-schmieders.de>: Fix memory leaks fromtteras
configuration reading code, and clean up error handling.
2011-11-17fixed some crashes in LIST_FOREACH where current element could be removed ↵vanhu
during the loop
2011-11-15Bump date for new tls option.wiz
2011-11-15From Vincent Bernat <bernat@luffy.cx>: TLS support for LDAPtteras
2011-11-14From Marcelo Leitner <mleitner@redhat.com>: do not shrink pfkey sockettteras
buffers (if system default is larger than what we want as minimum)
2011-10-11From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Release unusedtteras
phase2 of passive remotes after acquire.
2011-10-11From Wolfgang Schmieder <wolfgang.schmieder@honeywell.com>: setup phase1tteras
port properly.
2011-08-19Allow inherited remote blocks without additional remote statements totteras
be specified in a simpler way. patch by Roman Hoog Antink <rha@open.ch>