166adfa9e5
sync w/ 20040617.
2004-06-17 03:42:55 +00:00
f7968a3c82
version 20040617a, includes important fix about cert handling
2004-06-17 03:38:44 +00:00
b4a3a9e6c1
properly validate phase 1 signature.
...
http://www.vuxml.org/freebsd/d8769838-8814-11d8-90d1-0020ed76ef5a.html
2004-04-12 03:34:05 +00:00
604a0b444a
KAME racoon as of 2004/4/12
2004-04-12 03:26:57 +00:00
7fba5a69cf
reject packet with too big isakmp message length field.
2004-03-31 07:19:27 +00:00
c6a556a5b6
endian mismatch. from iij seil team
2004-01-16 02:25:14 +00:00
3c3791b847
validate hash on info exchange. bugtraq <20040113213940.GA1727@hzeroseven.org>
2004-01-14 09:17:42 +00:00
6de72ce0f8
typo. minoura
2003-11-13 10:35:40 +00:00
1356e8977e
pfkey_dump_sadb: when it get an error using sysctl,
...
mimic an error msg from keysock so that caller can process it correctly.
PR/23122.
2003-11-09 15:37:24 +00:00
746d6bb953
bring in kame rev 1.32. PR 23122
2003-11-04 04:30:38 +00:00
f90a2e28b1
do not build "null ESP and no AUTH" proposal. (racoon 174) by Tom Lendacky
2003-10-23 07:23:50 +00:00
6a6c3ca82f
Don't assign NULL as an integer.
2003-10-21 03:06:55 +00:00
73d47a4f07
Don't return NULL as an integer.
2003-10-21 03:03:39 +00:00
5749c53775
Fix what is obviously a bug: valloc() -> vmalloc(). Now racoon(8) doesn't core
...
dump all the time.
2003-09-25 01:00:32 +00:00
249c9d88ea
use sysctl to dump SAs if possible (not really tested)
2003-09-12 08:44:34 +00:00
f13cb0c7b2
bzero() 2nd arg mistake. found by openbsd guys. from kame
2003-09-04 00:12:56 +00:00
d9c46578d1
update racoon to 2003/8/26 version. mostly minor bugfixes.
2003-08-26 03:31:50 +00:00
2cfb643fda
KAME racoon, as of 2003/08/26
2003-08-26 03:27:01 +00:00
965395c9f3
re-enable __RCSID, sys/cdefs_elf.h rev 1.15 fixed the problem
2003-07-30 00:34:16 +00:00
f33c57af22
disable __RCSID for now, somehow it puts some of integer variables
...
into .text region
2003-07-29 23:17:39 +00:00
308bb7eb39
remove unused macro. PR 21150
2003-07-29 04:45:39 +00:00
4c43ef4ce1
xx_keylen has to return bits, not bytes. KAME-PR-488
2003-07-29 04:30:54 +00:00
f4401cd869
upgrade openssl to 0.9.7b. (AES is now supported)
...
alter des.h to be friendly with openssl/des.h (you can include both in the
same file)
make libkrb to depend on libdes. bump major.
massage various portioin of heimdal to be friendly with openssl 0.9.7b.
2003-07-24 14:16:30 +00:00
afdee9affa
__RCSID. add missing copyright in *.y and *.l (sync w/kame)
2003-07-12 09:37:09 +00:00
03eefe2ecf
sync w/ latest racoon
2003-07-12 09:02:24 +00:00
dc30725eaf
kame racoon 2003/7/12. lots of lots of stability fixes.
2003-07-12 08:45:39 +00:00
f9cc3a858b
Bump date for recent changes.
2003-07-04 12:33:11 +00:00
de2728383c
Punctuation fixes.
2003-07-04 12:31:33 +00:00
5e88ad0f63
Remove superfluous macro calls, add newline where missing, and
...
use \&[ (and similar) instead of \*(lB, since it works with both old and new groff.
2003-06-27 22:31:29 +00:00
1430af815a
discourage the use of aggressive mode
2003-06-16 08:40:11 +00:00
3f62dc6d24
strlcpy
2003-05-17 18:19:20 +00:00
0230a54dfb
plug memory leak. jgraessley at apple.com
2003-05-09 05:32:36 +00:00
a59c37eb75
parse EOS before performing #include. Joshua Graessley of apple (via kame)
2003-05-08 07:58:54 +00:00
5116f9caae
fix "round up to 8" code. from kame
2003-04-24 02:22:26 +00:00
2b75215a67
IPsec, not IPSEC. From Igor Sobrado in PR 19691.
2003-04-06 20:24:35 +00:00
86932ac56e
allocate, not alocate. Noted by mjl, not mjll.
2003-01-28 22:26:33 +00:00
8084625896
racoon.conf can be found in /etc/racoon, not /etc
2002-11-27 09:51:50 +00:00
a426f44395
sync w/ kame source from 2002/11/20.
...
- plug some memory leaks
- correct phase 2 proposal reqid handling
- check for fd_set overrun
2002-11-20 03:35:57 +00:00
7285409e64
KAME racoon as of 2002/11/20
2002-11-20 03:30:18 +00:00
314a4f35b5
correct panic() condition - it was backwards. remove kame-local diff
...
which was committed by mistake.
From: Rafal Boni <rafal@attbi.com>
2002-11-18 23:36:18 +00:00
df884fac23
revert previous. need more time to think.
2002-10-18 23:51:07 +00:00
8201174690
condition to panic() was backwards. sync w/kame
...
From: Rafal Boni <rafal@attbi.com>
2002-10-18 23:44:58 +00:00
4752a4465b
discourage the use of aggressive mode for identity disclosure.
2002-10-18 14:34:04 +00:00
f07ce00ec5
Turn on strict alignment #define's, because racoon reliably core
...
dumps on machines which require strict alignment such as sparc64.
2002-10-02 17:53:11 +00:00
42ebaa698b
don't touch free'ed memory. From: wang.zhong3@zte.com.cn, sync w/kame
2002-09-03 14:38:13 +00:00
e1754c22c2
if () statement error. From: Krister Walfridsson <cato@df.lth.se>
...
(not compiled) sync w/kame
2002-08-31 07:56:14 +00:00
bcb0cf6929
tighten isakmp header length validation. from kame
2002-08-28 04:44:04 +00:00
d103e0b575
plug memory leak. from ebisawa@iij. sync w/kame
2002-07-31 07:01:26 +00:00
6742cb1812
sweep of errx/warnx, remove unnecessary trailing \n
2002-07-20 08:36:17 +00:00
4b20971f01
Spell acquire with a 'c'.
2002-07-10 23:16:32 +00:00
itojun