![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.netbsd.org] / src / crypto / dist / ipsec-tools / src / racoon
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.9.6.1 / (download) - annotate - [select for diffs], Fri Sep 18 10:32:48 2009 UTC (2 years, 8 months ago) by tteras
Branch: ipsec-tools-0_7-branch
Changes since 1.9: +11 -3
lines
Diff to previous 1.9 (colored) next main 1.10 (colored)
From Tomas Mraz: Fix gssapi error checking.
Revision 1.16 / (download) - annotate - [select for diffs], Fri Sep 18 10:31:11 2009 UTC (2 years, 8 months ago) by tteras
Branch: MAIN
CVS Tags: yamt-pagecache-base5,
yamt-pagecache-base4,
yamt-pagecache-base3,
yamt-pagecache-base2,
yamt-pagecache-base,
yamt-pagecache,
netbsd-6-base,
netbsd-6,
matt-premerge-20091211,
matt-mips64-premerge-20101231,
ipsec-tools-0_8_0,
ipsec-tools-0_8-branch,
cherry-xenmp-base,
cherry-xenmp,
bouyer-quota2-nbase,
bouyer-quota2-base,
bouyer-quota2,
HEAD
Changes since 1.15: +61 -53
lines
Diff to previous 1.15 (colored)
From Tomas Mraz: Fix gssapi error checking.
Revision 1.14.2.1 / (download) - annotate - [select for diffs], Wed May 13 19:15:54 2009 UTC (3 years ago) by jym
Branch: jym-xensuspend
Changes since 1.14: +24 -69
lines
Diff to previous 1.14 (colored) next main 1.15 (colored)
Sync with HEAD. Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
Revision 1.15 / (download) - annotate - [select for diffs], Thu Mar 12 10:57:26 2009 UTC (3 years, 2 months ago) by tteras
Branch: MAIN
CVS Tags: jym-xensuspend-nbase,
jym-xensuspend-base
Changes since 1.14: +24 -69
lines
Diff to previous 1.14 (colored)
Support multiple anonymous remotes and decide remoteconf based on identity, received certificates and other information. General code clean up.
Revision 1.12.4.1 / (download) - annotate - [select for diffs], Sun Feb 8 18:42:16 2009 UTC (3 years, 3 months ago) by snj
Branch: netbsd-5
CVS Tags: netbsd-5-1-RELEASE,
netbsd-5-1-RC4,
netbsd-5-1-RC3,
netbsd-5-1-RC2,
netbsd-5-1-RC1,
netbsd-5-1-2-RELEASE,
netbsd-5-1-1-RELEASE,
netbsd-5-1,
netbsd-5-0-RELEASE,
netbsd-5-0-RC4,
netbsd-5-0-RC3,
netbsd-5-0-RC2,
netbsd-5-0-2-RELEASE,
netbsd-5-0-1-RELEASE,
netbsd-5-0,
matt-nb5-pq3-base,
matt-nb5-pq3,
matt-nb5-mips64-u2-k2-k4-k7-k8-k9,
matt-nb5-mips64-u1-k1-k5,
matt-nb5-mips64-premerge-20101231,
matt-nb5-mips64-premerge-20091211,
matt-nb5-mips64-k15,
matt-nb5-mips64,
matt-nb4-mips64-k7-u2a-k9b
Changes since 1.12: +66 -14
lines
Diff to previous 1.12 (colored) next main 1.13 (colored)
Apply patch (requested by manu/spz in #378): Downgrade ipsec-tools to 0.7.1nb1.
Revision 1.14 / (download) - annotate - [select for diffs], Fri Jan 23 08:23:51 2009 UTC (3 years, 4 months ago) by tteras
Branch: MAIN
Branch point for: jym-xensuspend
Changes since 1.13: +9 -9
lines
Diff to previous 1.13 (colored)
Fix authentication method ambiguity by internally using unique ID and setting/interpreting the wire format based on received vendor ID:s. Fixes trac #280.
Revision 1.13 / (download) - annotate - [select for diffs], Fri Jan 23 08:06:56 2009 UTC (3 years, 4 months ago) by tteras
Branch: MAIN
Changes since 1.12: +5 -11
lines
Diff to previous 1.12 (colored)
Introduce vendorid bitmask that can be used otherwhere to detect peer capabilities.
Revision 1.10.4.1 / (download) - annotate - [select for diffs], Thu Sep 18 04:54:19 2008 UTC (3 years, 8 months ago) by wrstuden
Branch: wrstuden-revivesa
Changes since 1.10: +12 -62
lines
Diff to previous 1.10 (colored) next main 1.11 (colored)
Sync with wrstuden-revivesa-base-2.
Revision 1.12 / (download) - annotate - [select for diffs], Mon Jul 21 06:26:06 2008 UTC (3 years, 10 months ago) by tteras
Branch: MAIN
CVS Tags: wrstuden-revivesa-base-3,
wrstuden-revivesa-base-2,
netbsd-5-base,
netbsd-5-0-RC1,
matt-mips64-base2
Branch point for: netbsd-5
Changes since 1.11: +6 -60
lines
Diff to previous 1.11 (colored)
Separate generic vendor id handling to a new function and use it.
Revision 1.11 / (download) - annotate - [select for diffs], Mon Jul 14 05:40:13 2008 UTC (3 years, 10 months ago) by tteras
Branch: MAIN
Changes since 1.10: +7 -3
lines
Diff to previous 1.10 (colored)
Clean up notification payload handling. Handle INITIAL-CONTACT notification in last main mode exchange (delayed) and during quick mode exchanges.
Revision 1.9.16.1 / (download) - annotate - [select for diffs], Mon Mar 24 07:14:30 2008 UTC (4 years, 2 months ago) by keiichi
Branch: keiichi-mipv6
Changes since 1.9: +3 -5
lines
Diff to previous 1.9 (colored) next main 1.10 (colored)
sync with head.
Revision 1.9.10.1 / (download) - annotate - [select for diffs], Sun Mar 23 00:13:34 2008 UTC (4 years, 2 months ago) by matt
Branch: matt-armv6
Changes since 1.9: +3 -5
lines
Diff to previous 1.9 (colored) next main 1.10 (colored)
sync with HEAD
Revision 1.10 / (download) - annotate - [select for diffs], Thu Mar 6 00:34:11 2008 UTC (4 years, 2 months ago) by mgrooms
Branch: MAIN
CVS Tags: yamt-pf42-baseX,
yamt-pf42-base4,
yamt-pf42-base3,
yamt-pf42-base2,
yamt-pf42-base,
yamt-pf42,
wrstuden-revivesa-base-1,
wrstuden-revivesa-base,
matt-armv6-nbase,
keiichi-mipv6-base,
hpcarm-cleanup-nbase
Branch point for: wrstuden-revivesa
Changes since 1.9: +3 -5
lines
Diff to previous 1.9 (colored)
Refactor admin socket event protocol to be less error prone. Backwards compatibility is provided. Submitted by Timo Teras.
Revision 1.9 / (download) - annotate - [select for diffs], Sat Sep 30 21:49:37 2006 UTC (5 years, 7 months ago) by manu
Branch: MAIN
CVS Tags: wrstuden-fixsa-newbase,
wrstuden-fixsa-base-1,
wrstuden-fixsa-base,
wrstuden-fixsa,
netbsd-4-base,
netbsd-4-0-RELEASE,
netbsd-4-0-RC5,
netbsd-4-0-RC4,
netbsd-4-0-RC3,
netbsd-4-0-RC2,
netbsd-4-0-RC1,
netbsd-4-0-1-RELEASE,
netbsd-4-0,
netbsd-4,
matt-mips64-base,
matt-mips64,
matt-armv6-prevmlocking,
matt-armv6-base,
ipsec-tools-0_7_3,
ipsec-tools-0_7_2,
ipsec-tools-0_7_1,
ipsec-tools-0_7-rc1,
ipsec-tools-0_7-beta3,
ipsec-tools-0_7-beta2,
ipsec-tools-0_7-beta1,
ipsec-tools-0_7-base,
ipsec-tools-0_7-RC1,
ipsec-tools-0_7,
hpcarm-cleanup-base,
hpcarm-cleanup,
cube-autoconf-base,
cube-autoconf
Branch point for: matt-armv6,
keiichi-mipv6,
ipsec-tools-0_7-branch
Changes since 1.8: +1 -18
lines
Diff to previous 1.8 (colored)
emove dead code (Coverity 4165)
Revision 1.8 / (download) - annotate - [select for diffs], Sat Sep 9 16:22:09 2006 UTC (5 years, 8 months ago) by manu
Branch: MAIN
Changes since 1.7: +206 -120
lines
Diff to previous 1.7 (colored)
Migration of ipsec-tools to NetBSD CVS part 2: resolving the import conflicts. Since we previously had a release branch and we import here the HEAD of CVS, let's assume all local changes are to be dumped. Local patches should have been propagated upstream, anyway.
Revision 1.1.1.6 / (download) - annotate - [select for diffs] (vendor branch), Sat Sep 9 16:11:57 2006 UTC (5 years, 8 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-base
Changes since 1.1.1.5: +206 -120
lines
Diff to previous 1.1.1.5 (colored)
Migrate ipsec-tools CVS to cvs.netbsd.org
Revision 1.1.1.2.2.4 / (download) - annotate - [select for diffs], Mon Nov 21 21:12:30 2005 UTC (6 years, 6 months ago) by tron
Branch: netbsd-3
CVS Tags: netbsd-3-1-RELEASE,
netbsd-3-1-RC4,
netbsd-3-1-RC3,
netbsd-3-1-RC2,
netbsd-3-1-RC1,
netbsd-3-1-1-RELEASE,
netbsd-3-1,
netbsd-3-0-RELEASE,
netbsd-3-0-RC6,
netbsd-3-0-RC5,
netbsd-3-0-RC4,
netbsd-3-0-RC3,
netbsd-3-0-RC2,
netbsd-3-0-3-RELEASE,
netbsd-3-0-2-RELEASE,
netbsd-3-0-1-RELEASE,
netbsd-3-0
Changes since 1.1.1.2.2.3: +15 -6
lines
Diff to previous 1.1.1.2.2.3 (colored) to branchpoint 1.1.1.2 (colored) next main 1.1.1.3 (colored)
Apply patch (requested by manu in ticket #981): Update ipsec-tools to version 0.6.3.
Revision 1.7 / (download) - annotate - [select for diffs], Mon Nov 21 14:20:29 2005 UTC (6 years, 6 months ago) by manu
Branch: MAIN
CVS Tags: abandoned-netbsd-4-base,
abandoned-netbsd-4
Changes since 1.6: +15 -6
lines
Diff to previous 1.6 (colored)
Merge ipsec-tools 0.6.3 import
Revision 1.1.1.5 / (download) - annotate - [select for diffs] (vendor branch), Mon Nov 21 14:12:12 2005 UTC (6 years, 6 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6_3
Changes since 1.1.1.4: +14 -5
lines
Diff to previous 1.1.1.4 (colored)
Import IPsec-tools 0.6.3. This fixes several bugs, including bugs that caused DoS.
Revision 1.1.1.2.2.3 / (download) - annotate - [select for diffs], Fri Oct 21 17:08:17 2005 UTC (6 years, 7 months ago) by riz
Branch: netbsd-3
CVS Tags: netbsd-3-0-RC1
Changes since 1.1.1.2.2.2: +20 -5
lines
Diff to previous 1.1.1.2.2.2 (colored) to branchpoint 1.1.1.2 (colored)
Pull up the following revisions (requested by manu in ticket #894): crypto/dist/ipsec-tools/ChangeLog 1.28-1.30 crypto/dist/ipsec-tools/NEWS 1.1.1.4 crypto/dist/ipsec-tools/configure.ac 1.1.1.7 crypto/dist/ipsec-tools/src/libipsec/pfkey.c 1.7-1.8 crypto/dist/ipsec-tools/src/libipsec/pfkey_dump.c 1.10 crypto/dist/ipsec-tools/src/libipsec/policy_parse.y 1.7 crypto/dist/ipsec-tools/src/racoon/cfparse.y 1.5-1.9 crypto/dist/ipsec-tools/src/racoon/evt.c 1.3 crypto/dist/ipsec-tools/src/racoon/ipsec_doi.c 1.11 crypto/dist/ipsec-tools/src/racoon/isakmp.c 1.10 crypto/dist/ipsec-tools/src/racoon/isakmp_agg.c 1.5-1.6 crypto/dist/ipsec-tools/src/racoon/isakmp_base.c 1.3-1.4 crypto/dist/ipsec-tools/src/racoon/isakmp_ident.c 1.3 crypto/dist/ipsec-tools/src/racoon/oakley.c 1.6 crypto/dist/ipsec-tools/src/racoon/pfkey.c 1.10 crypto/dist/ipsec-tools/src/racoon/policy.c 1.3 crypto/dist/ipsec-tools/src/racoon/racoon.conf.5 1.21-1.23 crypto/dist/ipsec-tools/src/racoon/sockmisc.c 1.3 crypto/dist/ipsec-tools/src/racoon/sockmisc.h 1.5 crypto/dist/ipsec-tools/src/setkey/setkey.8 1.17 lib/libipsec/package_version.h 1.15 Update to ipsec-tools 0.6.2
Revision 1.1.1.4 / (download) - annotate - [select for diffs] (vendor branch), Fri Oct 14 13:21:47 2005 UTC (6 years, 7 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6_2
Changes since 1.1.1.3: +20 -5
lines
Diff to previous 1.1.1.3 (colored)
Import ipsec-tools-0.6.2. Here is the ChangeLog since 0.6.1 (most of them
have already been pulled up in NetBSD CVS)
---------------------------------------------
0.6.2 released
2005-10-14 Yvan Vanhullebus <vanhu@netasq.com>
* src/racoon/ipsec_doi.c: don't allow NULL or empty FQDNs or
USER_FQDNs (problem reported by Bernhard Suttner).
---------------------------------------------
0.6.2.beta3 released
2005-09-05 Emmanuel Dreyfus <manu@netbsd.org>
From Andreas Hasenack <ahasenack@terra.com.br>
* configure.ac: More build fixes for Linux
---------------------------------------------
0.6.2.beta2 released
2005-09-04 Emmanuel Dreyfus <manu@netbsd.org>
From Wilfried Weissmann
* src/libipsec/policy_parse.y src/racoon/{ipsec_doi.c|oakley.c}
src/racoon/{sockmisc.c|sockmisc.h}: build fixes
---------------------------------------------
0.6.2.beta1 released
2005-09-03 Emmanuel Dreyfus <manu@netbsd.org>
From Francis Dupont <Francis.Dupont@enst-bretagne.fr>
* src/libipsec/pfkey.c src/racoon/pfkey.c: Cope with extensions
2005-08-26 Emmanuel Dreyfus <manu@netbsd.org>
* src/racoon/cfparse.y: handle xauth_login correctly
* src/racoon/isakmp.c: catch internal error
* src/raccon/isakmp_agg.c: fix racoon as Xauth client
* src/raccon/{isakmp_agg.c|isakmp_base.c}: Proposal safety checks
* src/racoon/evt.c: Fix memory leak when event queue overflows
2005-08-23 Emmanuel Dreyfus <manu@netbsd.org>
* src/racoon/{isakmp_agg.c|isakmp_ident.c|isakmp_base.c}: Correctly
initialize NAT-T VID to avoid freeing unallocated stuff.
2005-08-21 Emmanuel Dreyfus <manu@netbsd.org>
From Matthias Scheler <matthias.scheler@tadpole.com>
* src/racoon/{isakmp_cfg.c|racoon.conf.5}: enable the use of
ISAKMP mode config without Xauth.
2005-09-16 Yvan Vanhullebus <vanhu@free.fr>
* src/racoon/policy.c: Do not parse all sptree in inssp() if we
don't use Policies priority.
2005-08-15 Emmanuel Dreyfus <manu@netbsd.org>
From: Thomas Klausner <wiz@netbsd.org>
src/setkey/setkey.8: Drop trailing spaces
Revision 1.6 / (download) - annotate - [select for diffs], Mon Sep 26 16:24:57 2005 UTC (6 years, 8 months ago) by manu
Branch: MAIN
Changes since 1.5: +15 -1
lines
Diff to previous 1.5 (colored)
Fix bug when using hybrid auth in client mode make xauth_login work again add safety checks
Revision 1.5 / (download) - annotate - [select for diffs], Fri Sep 23 14:22:27 2005 UTC (6 years, 8 months ago) by manu
Branch: MAIN
Changes since 1.4: +6 -5
lines
Diff to previous 1.4 (colored)
Correctly initialize NAT-T VID to avoid freeing unallocated space
Revision 1.1.1.2.2.2 / (download) - annotate - [select for diffs], Sat Sep 3 07:03:49 2005 UTC (6 years, 8 months ago) by snj
Branch: netbsd-3
Changes since 1.1.1.2.2.1: +6 -6
lines
Diff to previous 1.1.1.2.2.1 (colored) to branchpoint 1.1.1.2 (colored)
Apply patch (requested by tron in ticket #741): Update ipsec-tools to version 0.6.1.
Revision 1.4 / (download) - annotate - [select for diffs], Sat Aug 20 00:57:06 2005 UTC (6 years, 9 months ago) by manu
Branch: MAIN
Changes since 1.3: +1 -1
lines
Diff to previous 1.3 (colored)
Update to ipsec-tools 0.6.1
Revision 1.3 / (download) - annotate - [select for diffs], Sun Aug 7 09:38:45 2005 UTC (6 years, 9 months ago) by manu
Branch: MAIN
Changes since 1.2: +6 -6
lines
Diff to previous 1.2 (colored)
Resolve conflicts caused by recent ipsec-tools-0.6.1rc1 import by prefering the newer software. Some useful local change might have been overwritten, we'll take care of this soon.
Revision 1.1.1.3 / (download) - annotate - [select for diffs] (vendor branch), Sun Aug 7 08:47:00 2005 UTC (6 years, 9 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6_1-rc1,
ipsec-tools-0_6_1
Changes since 1.1.1.2: +7 -1
lines
Diff to previous 1.1.1.2 (colored)
Update ipsec-tools to 0.6.1rc1 Most of the changes since 0.6b4 have already been committed to the NetBSD tree. This upgrade fixes some IPcomp and NAT-T related problems that were left unadressed in the NetBSD tree.
Revision 1.1.1.2.2.1 / (download) - annotate - [select for diffs], Tue Apr 12 09:29:41 2005 UTC (7 years, 1 month ago) by tron
Branch: netbsd-3
Changes since 1.1.1.2: +6 -0
lines
Diff to previous 1.1.1.2 (colored)
Pull up revision 1.2 (requested by manu in ticket #132): Resurrect TCP-MD5 support. This fixes bin/29915
Revision 1.2 / (download) - annotate - [select for diffs], Sun Apr 10 21:20:55 2005 UTC (7 years, 1 month ago) by manu
Branch: MAIN
Changes since 1.1: +9 -1
lines
Diff to previous 1.1 (colored)
Resurrect TCP-MD5 support. This fixes bin/29915
Revision 1.1.1.2 / (download) - annotate - [select for diffs] (vendor branch), Wed Feb 23 14:54:18 2005 UTC (7 years, 3 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: netbsd-3-base,
ipsec-tools-0_6-20050317,
ipsec-tools-0_6-20050314,
ipsec-tools-0_6-20050224,
ipsec-tools-0_6-20050223
Branch point for: netbsd-3
Changes since 1.1.1.1: +3 -1
lines
Diff to previous 1.1.1.1 (colored)
Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported version
according to ipsec-tools' ChangeLog:
2005-02-23 Emmanuel Dreyfus <manu@netbsd.org>
* configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal
support for patented algorithms: IDEA and RC5.
* src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it
is not required in the configuration
* src/racoon/isakmp.c: do not reject addresses for which kernel
refused UDP encapsulation, they can still be used for non NAT-T
traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)
2005-02-18 Emmanuel Dreyfus <manu@netbsd.org>
* src/racoon/{main.c|eaytest.c|plairsa-gen.c}
src/setkey/setkey.c: don't use fuzzy paths for package_version.h
2005-02-18 Yvan Vanhullebus <vanhu@free.fr>
* src/racoon/isakmp_inf.c: Purge generated SPDs when getting a
related DELETE_SA
* src/racoon/pfkey.c: do NOT unbindph12() when SA acquire
2005-02-17 Emmanuel Dreyfus <manu@netbsd.org>
From Fred Senault <fred.letter@lacave.net>
* src/racoon/remoteconf.c: Fix a bug in script init
2005-02-17 Yvan Vanhullebus <vanhu@free.fr>
* src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks
2005-02-15 Michal Ludvig <michal@logix.cz>
* configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Sat Feb 12 11:12:17 2005 UTC (7 years, 3 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6-base
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored)
Import ipsec-tools (tag ipsec-tools-0_6-base in ipsec-tools CVS) ipsec-tools is a fork from KAME racoon/libipsec/setkey, with many enhancements.
Revision 1.1 / (download) - annotate - [select for diffs], Sat Feb 12 11:12:17 2005 UTC (7 years, 3 months ago) by manu
Branch: MAIN
Initial revision