Spacing, no object change.

space -> tab

No object change.

Don't retransmit responses for unauthenticated messages.
Base on diff from Yuuichi Someya

ok markus reyk mikeb

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_N

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

show more ...

Fix interop-issue with vpn peers that start reyking on port 4500 when
NAT-T is used. Solves problems with cisco and openswan.

Tested by todd@ (cisco interop), ok ho@

Original fix with Stefan Roth

Fix interop-issue with vpn peers that start reyking on port 4500 when
NAT-T is used. Solves problems with cisco and openswan.

Tested by todd@ (cisco interop), ok ho@

Original fix with Stefan Roth (stefan dot roth at siemens dot com),
thanks!

show more ...

Use TAILQ_FOREACH where possible, remove payload_last()

ok markus

always enable aggressive, dpd, and isakmp_cfg

Better implementation of the Dead Peer Detection protocol, RFC 3706.
hshoexer@ ok.

Make the payload array in struct message dynamic, since we need to handle
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA.
Replace TAILQ_FIRST(&msg->payload[i]) instances with functio

Make the payload array in struct message dynamic, since we need to handle
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA.
Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.

show more ...

Mark authenticated messages explicitly. Better check for authentication before
deleteing SAs.

This fix is needed to solve the problems reported by Thomas Walpuski, previous
diff was not sufficient.

Mark authenticated messages explicitly. Better check for authentication before
deleteing SAs.

This fix is needed to solve the problems reported by Thomas Walpuski, previous
diff was not sufficient. Pointed out by Thomas. Thanks!

ok ho@ niklas@, testing and spellcheck by todd@ msf@

show more ...

More KNF. Mainly spaces and line-wraps, no binary change.

ok ho@

partial move to KNF. More to come. This has happened because there
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our

partial move to KNF. More to come. This has happened because there
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our standard
auditing process. ok ho hshoexer

show more ...

Style nits.

Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos
D. Keromytis and Niels Provos.

Sometimes the daemon will not die promptly on SIGTERM, even though
all DELETE notifications is sent out. Create a prioritized send-queue
for the DELETE messages to solve this. Some (C)-2001.
niklas@

Sometimes the daemon will not die promptly on SIGTERM, even though
all DELETE notifications is sent out. Create a prioritized send-queue
for the DELETE messages to solve this. Some (C)-2001.
niklas@ ok.

show more ...

message.c: Merge with EOM 1.156
message.h: Merge with EOM 1.51
transport.c: Merge with EOM 1.43

author: provos
use message_send_expire for timeouts. okay niklas@

Merge with EOM 1.50

author: niklas
alphabeticize

apps/certpatch/certpatch.8: Merge with EOM 1.4
apps/certpatch/certpatch.c: Merge with EOM 1.6
exchange.c: Merge with EOM 1.114
ike_quick_mode.c: Merge with EOM 1.110
ike_phase_1.c: Merge with EOM 1.1

apps/certpatch/certpatch.8: Merge with EOM 1.4
apps/certpatch/certpatch.c: Merge with EOM 1.6
exchange.c: Merge with EOM 1.114
ike_quick_mode.c: Merge with EOM 1.110
ike_phase_1.c: Merge with EOM 1.16
ike_auth.c: Merge with EOM 1.41
ike_aggressive.c: Merge with EOM 1.4
libcrypto.c: Merge with EOM 1.10
libcrypto.h: Merge with EOM 1.10
isakmpd.8: Merge with EOM 1.19
isakmpd.c: Merge with EOM 1.42
ipsec.h: Merge with EOM 1.40
init.c: Merge with EOM 1.22
message.c: Merge with EOM 1.143
message.h: Merge with EOM 1.49
sa.c: Merge with EOM 1.98
sa.h: Merge with EOM 1.54
policy.c: Merge with EOM 1.14
pf_key_v2.c: Merge with EOM 1.36
x509.c: Merge with EOM 1.32
x509.h: Merge with EOM 1.9
udp.c: Merge with EOM 1.46

author: niklas
Angelos copyrights

show more ...

ike_phase_1.c: Merge with EOM 1.8
message.c: Merge with EOM 1.135
message.h: Merge with EOM 1.48
sa.c: Merge with EOM 1.97
sa.h: Merge with EOM 1.53

author: angelos
Complete policy work; tested for

ike_phase_1.c: Merge with EOM 1.8
message.c: Merge with EOM 1.135
message.h: Merge with EOM 1.48
sa.c: Merge with EOM 1.97
sa.h: Merge with EOM 1.53

author: angelos
Complete policy work; tested for the shared-key case. Documentation needed.

show more ...

TO-DO: Merge with EOM 1.36
sa.c: Merge with EOM 1.90
message.c: Merge with EOM 1.131
message.h: Merge with EOM 1.47

author: niklas
Send DELETE payloads in informational exchanges

ike_phase_1.c: Merge with EOM 1.3
ike_quick_mode.c: Merge with EOM 1.84
message.h: Merge with EOM 1.46

author: niklas
New message_drop API. Generate real INVALID_COOKIE notification.
Generate infor

ike_phase_1.c: Merge with EOM 1.3
ike_quick_mode.c: Merge with EOM 1.84
message.h: Merge with EOM 1.46

author: niklas
New message_drop API. Generate real INVALID_COOKIE notification.
Generate informational exchanges in phase 1 too. Really get these
messages to the wire

show more ...

Merge with EOM 1.45

author: niklas
typo

author: niklas
Collapse MSG_NO_RETRANS & MSG_KEEP into MSG_LAST.

./message.h: Merge with EOM 1.43

Add LOG_REPORT to always go to logchannel regardless of level; misc small fixes

Make message_dump_raw public, for udp_report in udp.c

Garbage collect transports vi

./message.h: Merge with EOM 1.43

Add LOG_REPORT to always go to logchannel regardless of level; misc small fixes

Make message_dump_raw public, for udp_report in udp.c

Garbage collect transports via refcounting. Fix commentary.

1999 copyrights

show more ...

Merge from the Ericsson repository
| revision 1.39
| date: 1999/02/06 15:03:40; author: niklas; state: Exp; lines: +4 -1
| Do not forget to remove message from sendq when freed
| -----------------

Merge from the Ericsson repository
| revision 1.39
| date: 1999/02/06 15:03:40; author: niklas; state: Exp; lines: +4 -1
| Do not forget to remove message from sendq when freed
| ----------------------------

show more ...

Last months worth of work on isakmpd, lots done