Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
136,291 Commits 606 Branches 0 Tags 3.1 GiB
63a609062e
Commit Graph

51 Commits

Author SHA1 Message Date
manu
63a609062e From Manisha Malla <mmanisha@novell.com>: 
fix unsigned int checked for being negative
 2005-05-04 17:23:10 +00:00
manu
8bf053b3f3 on phase 2 acquire, lookup phase 2 by (src, dst, policy id) so that 
multiple SA can be used in transport mode

While I'm there, patch ipsec-tools ChangeLog to reflect the changes we
took from ipsec-tools-0_6-branch
 2005-05-03 21:08:47 +00:00
uwe
f3b48582e5 return statements in void functions make lint very confused. 2005-04-27 22:38:56 +00:00
manu
10802677c9 Bug fixes from the ipsec-tools 0.6 branch: 
- Fix NAT-T problems that prevented multiple peers behind the same NAT
  to talk to the same machine outside the NAT. This also require kernel
  fixes (already committed eralier)
- Fix a LP64 bug
- Fix NAT-T RFC conformance bugs (missing non ESP marker in packets)
- Add a -p option to setkey to display ports that could be used for ESP
  over UDP when printing policies
 2005-04-27 05:19:49 +00:00
manu
6845962b31 Fix simple DES support (security problems for racoon to racoon setups) 
Fix broken generated policies flush
 2005-04-19 19:42:08 +00:00
manu
d3e5d568cd Fix SA lifebyte check 2005-04-18 11:15:01 +00:00
wiz
e35111eeee Some more minor changes, ok manu@. 2005-04-17 01:03:46 +00:00
wiz
1390e25dcf Some more English improvements after feedback from manu@; more formatting. 2005-04-15 13:23:58 +00:00
wiz
6e35cd769e Improve English in comments. 2005-04-15 11:10:32 +00:00
wiz
0f822df19c Improve english, improve formatting, sort options. 2005-04-15 10:58:11 +00:00
wiz
c0259e4629 Grammar fixes & improvements. 2005-04-14 11:47:26 +00:00
wiz
57066c3ab7 Grammar improvements. 2005-04-14 11:41:53 +00:00
wiz
097b641d74 kerberos -> Kerberos. 2005-04-14 11:35:08 +00:00
wiz
1b303684c3 Fix typo. 2005-04-14 11:34:37 +00:00
wiz
6b53ca1794 all SA -> all SAs. 2005-04-14 10:31:35 +00:00
wiz
6e903fbf59 New sentence, new line; some other dot fixes found during line breaking. 2005-04-14 10:30:28 +00:00
wiz
1131da3fb1 Use capitalized spelling of NetBSD. 2005-04-14 10:26:40 +00:00
wiz
6e8a3f159a Add LIBRARY section. 2005-04-14 10:25:58 +00:00
wiz
863b095e57 Punctuation nits. 2005-04-14 10:24:43 +00:00
wiz
0fb9995f39 Use Bq instead of []. 2005-04-14 10:24:18 +00:00
wiz
75b3bff7ae Punctuation nits. 2005-04-14 10:23:38 +00:00
wiz
dd317f6217 Use .In for header files. 2005-04-14 10:22:11 +00:00
wiz
9e8d46e23b No dot at end of SEE ALSO; Xr fixes. 2005-04-14 10:21:22 +00:00
wiz
9582558bf7 Mostly punctuation nits; break line after Xr arguments. 2005-04-14 10:20:01 +00:00
wiz
954b6abb72 Fix Dd and Dt arguments; fix two more typos; add comma in SEE ALSO; 
format author with An/Aq.
 2005-04-14 10:15:58 +00:00
wiz
2299aab679 We want .Os without argument. 2005-04-14 10:13:10 +00:00
wiz
f6b271af05 Add missing .Os. 2005-04-14 10:13:03 +00:00
wiz
472d87499c Uncomment xref to racoonctl. 2005-04-14 10:11:32 +00:00
wiz
acc79b78a6 hexa-decimal -> hexadecimal. 2005-04-14 10:07:35 +00:00
wiz
db0843b173 Add an article, and 2nd -> second. 2005-04-14 10:07:10 +00:00
wiz
f7c1b62f03 Use Xr for chroot. 2005-04-14 10:06:32 +00:00
wiz
d0e3ae6a43 oakley -> Oakley. 2005-04-14 10:05:45 +00:00
wiz
caf942511e aspell 2005-04-14 10:04:17 +00:00
wiz
2ea3f3fa43 Drop trailing whitespace. 2005-04-14 09:47:12 +00:00
wiz
03a7a7234a New sentence, new line. Remove Os argument (we are not KAME). 
NetBSD -> Nx. Use Sx for section cross-references.
 2005-04-13 23:12:01 +00:00
wiz
6cd6ff42d8 Drop trailing whitespace. 2005-04-13 23:09:35 +00:00
manu
5a6c417352 Resurrect TCP-MD5 support. This fixes bin/29915 2005-04-10 21:20:55 +00:00
manu
09a5230af6 Fix a buffer overrun in ISAKMP mode config SET handler 2005-04-04 21:43:26 +00:00
manu
d658ac5976 Updated ipsec-tools: 
2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool
 2005-03-16 23:53:12 +00:00
manu
8a98c83667 Updated ipsec-tools: 
2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool
 2005-03-16 23:52:42 +00:00
manu
e4563075a5 Updated ipsec-tools: 
2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool
 2005-03-16 23:51:44 +00:00
manu
e298dc4582 Import ipsec-tools ipsec-tools-0_6-20050314 2005-03-14 08:14:24 +00:00
manu
519aeb19a0 Resolve conflict 2005-02-24 20:59:24 +00:00
manu
6159f46a8d Import ipsec-tools ipsec-tools-0_6-20050224 2005-02-24 20:52:25 +00:00
manu
88856e235d Resolve conficts and remove autoconf files that were committed by mistake 2005-02-23 15:17:50 +00:00
manu
8006965b1b Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported version 
according to ipsec-tools' ChangeLog:

2005-02-23  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal
          support for patented algorithms: IDEA and RC5.
        * src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it
          is not required in the configuration
        * src/racoon/isakmp.c: do not reject addresses for which kernel
          refused UDP encapsulation, they can still be used for non NAT-T
          traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)

2005-02-18  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{main.c|eaytest.c|plairsa-gen.c}
          src/setkey/setkey.c: don't use fuzzy paths for package_version.h

2005-02-18  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/isakmp_inf.c: Purge generated SPDs when getting a
          related DELETE_SA
        * src/racoon/pfkey.c: do NOT unbindph12() when SA acquire

2005-02-17  Emmanuel Dreyfus <manu@netbsd.org>

        From Fred Senault <fred.letter@lacave.net>
        * src/racoon/remoteconf.c: Fix a bug in script init

2005-02-17  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks

2005-02-15  Michal Ludvig  <michal@logix.cz>

        * configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN
 2005-02-23 14:53:33 +00:00
thorpej
3029ac0bc4 Use __inline instead of inline. 2005-02-19 22:02:59 +00:00
thorpej
2a7ae5ee05 Fix package_version.h include path so it has a chance of working in 
our source tree.
 2005-02-18 06:28:52 +00:00
thorpej
b4668e17e3 Alter the include path for package_version.h so that it has a chance 
of working in our source tree.
 2005-02-18 06:24:38 +00:00
manu
1cbaff0bc3 Remove .cvsignore files commtted by mistake 2005-02-12 15:52:36 +00:00