#
fe0dc84e |
| 02-Sep-2016 |
mikeb <mikeb@openbsd.org> |
Adjust for the new default MODP group
|
#
1589cf03 |
| 17-Sep-2012 |
markus <markus@openbsd.org> |
sync with transform-name-fix
|
#
02cf1b84 |
| 15-Sep-2012 |
markus <markus@openbsd.org> |
sync with recent ipsecctl changes/fixes
|
#
befd40c8 |
| 01-Jul-2008 |
bluhm <bluhm@openbsd.org> |
Isakmpd acquire mode did not work with a config generated from ipsec.conf. The config created by isakmpd dynamically was different from the config that ipsecctl generated out of ipsec.conf.
Both co
Isakmpd acquire mode did not work with a config generated from ipsec.conf. The config created by isakmpd dynamically was different from the config that ipsecctl generated out of ipsec.conf.
Both config formats are changed so that they match. One needs a passive ike line and a require flow line with the same parameters in the ipsec.conf. Then the acquire message generated by the kernel will trigger isakmpd to generate a config that matches the one that ipsecctl generated from the ike line.
ok hshoexer, 'sounds good' todd
show more ...
|
#
3cecc1f6 |
| 30-Nov-2006 |
markus <markus@openbsd.org> |
wrong rid for protocol
|
#
a7159f8b |
| 30-Nov-2006 |
markus <markus@openbsd.org> |
sync: proto/port in lid/rid/connection
|
#
0ddb88c9 |
| 24-Nov-2006 |
markus <markus@openbsd.org> |
fix typo for remote port; from Brian Candler
|
#
390b7686 |
| 18-Jun-2006 |
hshoexer <hshoexer@openbsd.org> |
adopt to recent changes
|
#
f2e8bc8e |
| 10-Jun-2006 |
hshoexer <hshoexer@openbsd.org> |
adopted to recent change.
|
#
faafa9d1 |
| 02-Jun-2006 |
naddy <naddy@openbsd.org> |
check port modifiers in ike rules
|