agc
eb8043c766
Add lua language bindings for netpgp
2009-10-12 02:55:46 +00:00
agc
0aa9bcca65
Add some checks for return value from allocation routines
2009-10-09 06:02:55 +00:00
agc
7affbacab9
More checking of allocation return values where not already done.
...
Revamp hash initialisation to return a success/failure error code.
Document places where we prefer to continue with a NULL buffer,
rather than silently continue with possibly erroneous results.
2009-10-07 16:19:51 +00:00
agc
e82f21eb7a
More checks for the return value from memory allocation.
2009-10-07 04:56:51 +00:00
agc
83cfb9deb0
Clean up some Flexelint (issues pointed out by phk - many thanks!).
...
Also make sure the return value for each memory allocation is checked - this
is still a WIP.
2009-10-07 04:18:47 +00:00
agc
57036e7063
More Flexelint cleanup from issues pointed out by phk - thanks! - just easy
...
low-hanging fruit for now.
2009-10-06 05:54:24 +00:00
agc
b491010d02
More Flexelint cleanup from phk - many thanks! - low-hanging fruit for
...
just now.
2009-10-06 03:30:59 +00:00
agc
1603af0219
Clean up more Flexelint, from phk - many thanks! - just low-hanging fruit
...
for just now.
2009-10-06 02:46:17 +00:00
agc
814ccb85bf
Clean up Flexelint warnings - from phk, many thanks - just low-hanging
...
fruit for just now.
2009-10-06 02:39:53 +00:00
agc
5a83dba05a
More Flexelint fixes from phk - just low-hanging fruit for just now -
...
many thanks!
2009-10-06 02:26:05 +00:00
agc
3574ef6dec
Get rid of some lint-style issues - pointed out by Poul-Henning Kamp
...
and FlexeLint (many thanks!)
2009-10-04 21:58:25 +00:00
agc
e8be961ca7
Get rid of multiple prototypes - pointed out by Poul-Henning Kamp and
...
FlexeLint (many thanks!)
2009-10-04 21:57:09 +00:00
agc
f462900c00
const poisoning - pointed out by Poul-Henning Kamp and FlexeLint (many
...
thanks!)
2009-10-04 21:55:55 +00:00
tls
be6d3543e4
Remove -I line for no longer extant directory. The OpenSSL libraries
...
built here, unsurprisingly enough, still build and work exactly the
same.
2009-09-23 04:02:28 +00:00
tteras
ff2c7b7d5c
From Tomas Mraz: Fix gssapi error checking.
2009-09-18 10:31:11 +00:00
tteras
63bcd231eb
When rekeying phase2 use phase1 used to negotiate phase2 as a hint to
...
select the phase1 for rekeying the new phase2.
2009-09-03 09:29:07 +00:00
tteras
ae0beb16dc
Check nat_traversal configuration from remote configuration candidates
...
when acting as responder. Enable NAT-T if any of the remote candidates
have NAT-T enabled.
2009-09-01 12:22:09 +00:00
tteras
5e74d5d98f
Change remote conf matching level to matching score. This way one can
...
override anonymous certificate block config with more exact "inhereted"
IP specific block.
2009-09-01 09:49:59 +00:00
tteras
43e6802298
From Maik Broemme: export ISAKMP SA identity as REMOTE_ID for phase1 up
...
script (trac #313 ).
2009-09-01 09:24:21 +00:00
vanhu
b7f72d1283
fixed typo: algoriym -> algorithm
2009-08-24 09:33:03 +00:00
vanhu
a3d9e80f96
fixed address check in rmconf_match_type(), just check address with wildcard port
2009-08-19 13:54:07 +00:00
tteras
95f3bd08bb
Have an enum for rmconf_match_type() return values to make the code a bit
...
more readable.
2009-08-19 12:20:02 +00:00
vanhu
e2ffc89458
typo: algoritym -> algorithm
2009-08-18 08:21:12 +00:00
dyoung
40ca2d34bc
Delete trailing whitespace.
2009-08-17 22:58:28 +00:00
vanhu
eb15fbb554
do not use SADB_X_NAT_T_NEW_MAPPING to check system support for NAT-T, as at least FreeBSD doesn't have this define anymore
2009-08-17 13:52:14 +00:00
vanhu
82dd0659f2
include stddef.h so we have a chance to get the system offsetof if present
2009-08-17 12:00:53 +00:00
vanhu
c2c64af1e8
removed a self include
2009-08-17 11:59:10 +00:00
christos
13492ada53
This code is really broken. It allocates struct sockaddr on the stack
...
and expects to work with IPV6. Tell the hints that we only want IPV4
for now, so that we don't try to bind to an IPV6 address as returned
by getaddrinfo, and then we bash in V4 in the family!
jeez
2009-08-15 01:25:54 +00:00
christos
e70d1f0896
don't try to free a buffer that came from the arguments, make a copy instead.
...
This can happen if we specify --port
2009-08-15 01:03:03 +00:00
vanhu
0667dd70bd
fixed a potential DoS in oakley_do_decrypt(), reported by Orange Labs
2009-08-13 09:18:28 +00:00
tteras
ea830abf58
Don't print EAGAIN error from pfkey_handler(), it can occur normally
...
under some code paths and is not a hard error in any case.
2009-08-10 08:22:13 +00:00
tteras
c2919dd501
From Paul Wenau: Check fgets return value in setkey to make gcc happy.
2009-08-06 04:44:43 +00:00
christos
bb8cb2851b
resolve conflicts
2009-08-05 18:38:21 +00:00
christos
86adef1b84
import 20090805 snapshot.
2009-08-05 18:31:57 +00:00
tteras
4180506456
From Paul Wernau: Fix transport mode per-port security associations that
...
got broke during NAT-T fixes.
2009-08-05 13:16:01 +00:00
joerg
15895248c1
Use OpenSSL's SHA256 support directly.
2009-08-03 20:56:25 +00:00
mrg
03f1126058
set SSHDIST to the new location. HI CHRISTOS!
2009-07-21 00:47:23 +00:00
christos
e97383ebc1
Don't lets this linger around forever. Causes hidden bugs.
2009-07-20 22:55:47 +00:00
christos
d7ed66ca45
make tests compile!
2009-07-20 20:41:05 +00:00
christos
71cfba1556
ssh has moved (a long time ago)
2009-07-20 17:39:01 +00:00
christos
75efea6592
bump libcrypto and friends; OpenSSL abi change: do_cipher last argument
...
changed from u_int to size_t. Affects _LP64 only.
2009-07-20 17:30:52 +00:00
christos
35bdca4d17
use the proper libcrypto
2009-07-20 15:48:16 +00:00
christos
58e8878cb5
use the proper libcrypto
2009-07-20 15:43:51 +00:00
christos
9610bc301c
make sha256/512 binary compatible with the libc version which we now use.
2009-07-20 15:34:49 +00:00
christos
c9c3cfbcf5
catch up with openssl's abi change. do_cipher length changed from u_int to
...
size_t.
2009-07-20 15:33:44 +00:00
christos
22505a154a
add openssl
2009-07-19 23:44:20 +00:00
christos
e3aebf9996
new openssl
2009-07-19 23:43:46 +00:00
christos
2e69c03e37
openssl moved
2009-07-19 23:34:00 +00:00
christos
75534b786a
Add one more generated file and install in /usr/bin
2009-07-19 23:33:34 +00:00
christos
49d46fa3c8
- add build glue
...
- apply our changes
2009-07-19 23:30:37 +00:00
