| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2023-05-09 | Deal with OpenSSL-3.x | christos | |
| 2023-02-27 | cast to the correct message structure (rt_msghdr instead of if_msghdr) | kardel | |
| 2022-10-11 | Add parser sadb_x_policy_flags to libipsec/key_debug. | knakahara | |
| 2022-04-21 | ipsec-tools: in lint mode, keep keyword 'inline' | rillig | |
| This avoids hundreds of lint warnings for OpenSSL's stack definitions: openssl/x509.h(75): warning: static function sk_X509_NAME_ENTRY_num unused [236] | |||
| 2022-01-23 | PR/56658: Juraj Hercek: Plain RSA keys are not loaded by racoon IKE daemon | christos | |
| 2022-01-23 | PR/56657: Juraj Hercek: Add plainrsa-gen utility mentioned in racoon.conf(5) | christos | |
| and fix it for OpenSSL 1.1 | |||
| 2022-01-01 | s/implemenation/implementation/ in comment. | msaitoh | |
| 2021-12-05 | s/vlaue/value/ | msaitoh | |
| 2021-12-05 | s/stauts/status/ | msaitoh | |
| 2021-12-05 | s/preceed/preced/ | msaitoh | |
| 2021-12-05 | s/from from/from/ in comment. | msaitoh | |
| 2021-12-05 | s/funtion/function/ in comment. | msaitoh | |
| 2021-09-14 | ipsectools: fix lint error | rillig | |
| Returning a value from a void function is a GNU extension, but even in GNU mode, lint does not allow these. No functional change. | |||
| 2021-09-06 | libipsec: fix undefined behavior when calling isprint | rillig | |
| 2021-08-09 | fix typos in asymmetry, asymmetric(al), symmetrical. | andvar | |
| 2021-07-24 | Fix all remaining typos, mainly in comments but also in few definitions and ↵ | andvar | |
| log messages, reported by me in PR kern/54889. Also fixed some additional typos in comments, found on review of same files or typos. | |||
| 2020-11-25 | Add ldap parameters debug and timeout. | bouyer | |
| Fix bug when using URI (use correct len for malloc) document ldap parameters uri, debug and timeout. | |||
| 2020-11-25 | Add an option to pass a ldap uri, instead of just server and port. | bouyer | |
| uri takes precedence. | |||
| 2020-11-25 | Fix ldap: ldap_sasl_bind_s() doens't like a NULL struct berval *, pass | bouyer | |
| a pointer to a zero'd struct instead. While there use LDAP_SASL_SIMPLE instead of NULL for mechanism, and check return of ldap_set_option(). | |||
| 2020-11-25 | Reduce previous | christos | |
| 2020-11-25 | Fix address advancing for i386 and other 32-bit platforms. | kardel | |
| Makes racoon grok IPv6 addresses again on these platforms. | |||
| 2020-06-05 | fix wrong size addition (Andrew Cagney) | christos | |
| XXX: This file is nearly identical with /usr/src/sys/netipsec/key_debug.c and should be merged. | |||
| 2020-05-14 | Remove extra semicolon. | msaitoh | |
| 2020-05-12 | - in script mode always output errors to stderr prefixed by the program name. | christos | |
| - in command mode always output errors to stdout not prefixed " " " - perror(3) -> warn(3) | |||
| 2020-05-12 | Keep track of the filename to print in error messages. | christos | |
| Change quoting of error string from [] to `'. | |||
| 2020-05-10 | prefix errors with the program name and use stderr. | christos | |
| 2019-07-23 | Remove superfluous Li; rename section to match standards. | wiz | |
| 2019-07-23 | setkey: document getspi and update | ozaki-r | |
| 2019-07-23 | setkey: enable to use the getspi API | ozaki-r | |
| If a specified SPI is not zero, tell the kernel to use the SPI by using SADB_EXT_SPIRANGE. Otherwise, the kernel picks a random SPI. It enables to mimic racoon. | |||
| 2019-02-03 | mark promisc() __dead - it never returns. | mrg | |
| 2018-11-19 | Use Cm instead of Li or Ar for fixed command strings | ozaki-r | |
| 2018-10-14 | Remove dead files that have never been built, and likely can't build since | maxv | |
| they are not correct C files. | |||
| 2018-10-14 | Clean up setkey: remove dead wood, KNF, localify, and slightly improve. | maxv | |
| 2018-10-13 | Fix SF#24: incorrect authentication algorithms, copy-pasto. | maxv | |
| 2018-10-13 | Fix ticket SF#91: pass the correct size for tbuf. | maxv | |
| 2018-10-05 | From Thomas Reim: | christos | |
| Current racoon code cannot detect duplicate last fragments as it uses the fragment flag instead of the fragment number. The code does not consider that the IKE payload fragments might not be received in the correct order. In this case, packet complete detection will again fail and VPN clients abandoned from VPN service. Nevertheless, clients still can add fragments to the fragment queue and fill it up to the possible 255 fragments. Only duplicates are detected, but not the fragments with a number greater than the last fragment number. The last fragment number is kept in the Phase 1 handler after fragment queue deletion, which may lead to error notifications after succesful reassembly of the IKE phase 1 message. In general, the 2017's CVE fix added laconic and difficult to understand failure notifications, which do not much help for analysis, why a VPN client was blocked by racoon server. This patch fixes the code and aligns it to Microsoft/Cisco IKE fragmentation specification. It provides error logging which is in line with above specification and adds some debug info to the logs to better support analysis VPN client blackballing. XXX: pullup-8 | |||
| 2018-10-02 | PR/53646: Thomas Reim: Incorrect detection of the packet complete code in | christos | |
| fragment list check. While the fix in https://launchpad.net/~rdratlos/+archive/ubuntu/racoon - if (i > last_frag) /* It is complete */ + if (i >= last_frag) /* It is complete */ has the correct behavior, it violates the test for successful completion of the invariant of the loop: for (i = 1; i <= last_frag; i++) { if (!check_fragment_index()) break; } if (i > last_frag) return ok; It is better to move the check for NULL in the loop earlier, so that the final iteration is done and the test is kept the same. It makes the code easier to understand and preserves the original intent. XXX: pullup-8 | |||
| 2018-09-06 | Remove dead references to netinet6/ipsec.h. | maxv | |
| 2018-09-06 | sync with reality | maxv | |
| 2018-08-28 | fix memory leaks: https://github.com/NetBSD/src/issues/6 | christos | |
| 2018-05-28 | drop __P, suggested by sevan | maxv | |
| 2018-05-28 | drop __P, suggested by sevan | maxv | |
| 2018-05-28 | fix -Wold-style-definition | maxv | |
| 2018-05-28 | Remove ipsec_bindump, there is no prototype, so the function can't be used. | maxv | |
| 2018-05-28 | fix -Wdiscarded-qualifiers | maxv | |
| 2018-05-28 | fix -Wunused and -Wold-style-definition | maxv | |
| 2018-05-20 | Style. | maxv | |
| 2018-05-19 | Remove dead code, and style. | maxv | |
| 2018-05-19 | Remove unused 'error' variables, it's obvious they should have no use. | maxv | |
| 2018-05-19 | Use strict prototypes, when they don't introduce more warnings than they fix. | maxv | |
| Also localify a few functions. | |||
