ec03fa3be9
handle ctime returning NULL.
2010-04-02 15:26:17 +00:00
467b66f1cd
make it obvious to grep that ctime is being checked.
2010-04-02 15:25:04 +00:00
ef20b5e868
handle ctime returning NULL.
2010-04-02 15:23:17 +00:00
53ab8e0b3c
make it obvious what ctime is used for.
2010-04-02 15:19:02 +00:00
bd7ae6bd09
handle ctime returning NULL.
2010-04-02 15:13:26 +00:00
fcbd1014fb
PR/42363: Yasuoka Masahiko: Second part of the patch: iterate only on the
...
phase2 handles that are bound by the given phase1 handle.
2010-03-11 15:44:48 +00:00
e3413574b5
From Stefan Bauer: Fix multiple typoes and manpage formatting errors.
2010-03-05 06:47:58 +00:00
709abc828e
From Pierre POMES: fixed admin port initialization
2010-03-04 15:13:53 +00:00
ccaf1e96be
Fight the ever-increasing size of src checkouts by spelling "useful"
...
without an extra l.
2010-02-28 15:52:16 +00:00
8e35c759e7
Fix typo in comment.
2010-02-09 23:05:16 +00:00
6439b76ce2
make the window size function return the lines and columns variables separately
...
instead of depending on the existance of struct winsize. Technically I should
bump the library version or version the symbol, but nothing seems to use this
outside the library!
2010-01-24 16:45:57 +00:00
6e3a01841c
don't expose struct winsize needlessly.
2010-01-24 16:42:12 +00:00
9357df271a
Backout previous.
2010-01-20 19:54:07 +00:00
64cc3f120f
Backout previous which breaks build on NetBSD. Pointed out by wiz@.
...
Probably we have to add a check for HAVE_STRUCT_WINSIZE
in src/tools/configure as src/crypto/dist/heimdal/configure does.
2010-01-20 15:03:50 +00:00
ad30688c11
Don't include src/include heimdal/roken.h on tools build because
...
it's "an OS dependent, generated file" configured for the target NetBSD
as noted in itself. Instead, include <roken-common.h>
(which is included from generated <roken.h> and required
for TRUE and fALSE definitions) and "nbtool_config.h" on tools build.
Fixes PR toolchain/41435 and makes cross build on Cygwin-1.7 work.
No particular comments in the PR.
2010-01-20 12:54:17 +00:00
e15635055f
Free strdeupped string after using it. Found by cppcheck.
2010-01-17 23:03:01 +00:00
44e3b1fff7
Close file handles after using them. Found by cppcheck.
2010-01-17 23:02:48 +00:00
0e901e0c61
Use .%U instead of .%O for URLs.
2010-01-15 19:18:51 +00:00
119e5ecd44
From Paul Wernau: vmbuf.h was defined twice in the headers. Remove the
...
redundant entry so new install tool does not complain about overwriting
just installed file.
2009-12-11 09:04:04 +00:00
aabb31871d
PR/42363: Yasuoka Masahiko:
...
racoon uses a wrong IPsec-SA handle that is for other peer in case it
receives a ISAKMP message for IPsec-SA that has the same message-id as
the message-id that is received before.
racoon uses message-id to find the handle of IPsec-SA. The message-id
is a unique number for each peer, but different peers may use the same
value.
Different Windows Vista or Windows 7 peers seem to use the same
message-id. racoon can handle the first Windows's Phase-2, but it
cannot handle the second Windows. Because racoon misunderstands the
message for the second Windows as the message for the first Windows.
>Category: bin
>Synopsis: racoon uses a wrong IPsec-SA that is for different peer
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: bin-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Sun Nov 22 18:25:00 +0000 2009
>Originator: yasuoka@iij.ad.jp
2009-11-22 19:34:55 +00:00
2853bbf4b7
use %option instead of #define YY_NO_...
2009-10-29 14:49:02 +00:00
792f03d2b0
use %option noinput nounput
2009-10-29 14:34:27 +00:00
cd2a002a7a
no unput
2009-10-28 20:59:46 +00:00
02d06f301f
Remove .Os argument.
...
Remove ending dot in SEE ALSO.
Use Fl Fl for long options.
New sentence, new line.
Remove trailing whitespace.
2009-10-25 10:30:47 +00:00
06921da813
Fix section number for a man page reference.
...
While here put the man pages in the SEE ALSO in order too.
(This was shared and now fixed upstream too.)
2009-10-25 01:52:04 +00:00
fa923fa9a7
Fix Nm macro usage.
...
Fixed upstream in April:
9747de8132
2009-10-24 11:12:56 +00:00
638b376411
Fix Document Title.
...
(I already report and it is fixed upstream.)
2009-10-24 11:09:31 +00:00
d935d602c7
Fix redundancy.
2009-10-15 00:07:45 +00:00
addb345ac7
Do not work around ancient groff limits with .Xo/.Xc.
2009-10-14 23:37:33 +00:00
4467064d5b
Do not use .Xo/.Xc to workaround ancient groff limits.
2009-10-14 23:36:55 +00:00
a453670196
Do not use .Xo/.Xc to work around ancient groff limits.
...
Fix markup.
2009-10-14 18:34:14 +00:00
0639ebde24
Don't use .Xo/.Xc to work around ancient groff limits.
...
Set only one list type.
2009-10-14 18:22:04 +00:00
2644011d38
Use proper markup.
2009-10-14 17:33:56 +00:00
68d56b9fdf
Fix markup.
2009-10-13 22:49:34 +00:00
37aea36c2a
Use sane logical markup and actual cross references.
2009-10-13 22:47:55 +00:00
951207a2a8
Fix markup.
2009-10-13 22:47:31 +00:00
ff2c7b7d5c
From Tomas Mraz: Fix gssapi error checking.
2009-09-18 10:31:11 +00:00
63bcd231eb
When rekeying phase2 use phase1 used to negotiate phase2 as a hint to
...
select the phase1 for rekeying the new phase2.
2009-09-03 09:29:07 +00:00
ae0beb16dc
Check nat_traversal configuration from remote configuration candidates
...
when acting as responder. Enable NAT-T if any of the remote candidates
have NAT-T enabled.
2009-09-01 12:22:09 +00:00
5e74d5d98f
Change remote conf matching level to matching score. This way one can
...
override anonymous certificate block config with more exact "inhereted"
IP specific block.
2009-09-01 09:49:59 +00:00
43e6802298
From Maik Broemme: export ISAKMP SA identity as REMOTE_ID for phase1 up
...
script (trac #313 ).
2009-09-01 09:24:21 +00:00
b7f72d1283
fixed typo: algoriym -> algorithm
2009-08-24 09:33:03 +00:00
a3d9e80f96
fixed address check in rmconf_match_type(), just check address with wildcard port
2009-08-19 13:54:07 +00:00
95f3bd08bb
Have an enum for rmconf_match_type() return values to make the code a bit
...
more readable.
2009-08-19 12:20:02 +00:00
e2ffc89458
typo: algoritym -> algorithm
2009-08-18 08:21:12 +00:00
eb15fbb554
do not use SADB_X_NAT_T_NEW_MAPPING to check system support for NAT-T, as at least FreeBSD doesn't have this define anymore
2009-08-17 13:52:14 +00:00
82dd0659f2
include stddef.h so we have a chance to get the system offsetof if present
2009-08-17 12:00:53 +00:00
c2c64af1e8
removed a self include
2009-08-17 11:59:10 +00:00
0667dd70bd
fixed a potential DoS in oakley_do_decrypt(), reported by Orange Labs
2009-08-13 09:18:28 +00:00
ea830abf58
Don't print EAGAIN error from pfkey_handler(), it can occur normally
...
under some code paths and is not a hard error in any case.
2009-08-10 08:22:13 +00:00
christos