summaryrefslogtreecommitdiff
path: root/security/ipsec-tools
AgeCommit message (Collapse)AuthorFilesLines
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin1-2/+2
2015-12-29Sort.dholland1-26/+26
2015-11-04Add SHA512 digests for distfiles for security categoryagc1-1/+2
Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-05-19Protect against a NULL pointer dereference described in:sevan3-3/+23
https://www.altsci.com/ipsec/ Patch obtained from src/crypto/dist/ipsec-tools/src/racoon/gssapi.c Bump PKGREVISION
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-2/+2
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-1/+2
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-2/+1
2010-11-11reset maintainer, he does not use this package anymore.obache1-2/+2
2010-03-06update to latest releasespz2-27/+32
DESTDIRify ok'd by manu@
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz1-1/+2
2009-06-14Remove @dirrm entries from PLISTsjoerg1-7/+1
2009-01-10From Sergey Svishchev <svs@ropnet.ru>: ipsec-tools builds fine on FreeBSDmanu1-2/+2
2008-08-16Update to ipsec-tools 0.7.1, fixes CVE-2008-3652manu2-8/+7
Changes since the 0.6 branch: 0.7.1 - 23 July 2008 o Fixes a memory leak when invalid proposal received o Some fixes in DPD o do not set default gss id if xauth is used o fixed hybrid enabled builds o fixed compilation on FreeBSD8 o cleanup in network port value manipulation o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_sp i() o Generates a log if cert validation has been disabled by configuration o better handling for pfkey socket read errors o Fixes in yacc / bison stuff o new plog() macro (reduced CPU usage when logging is disabled) o Try to works better with huge SPD/SAD o Corrected modecfg option syntax o Many other various fixes... 0.7 - 09 August 2007 o Xauth with pre-shared key PSK o Xauth with certificates o SHA2 support o pkcs7 support o system accounting (utmp) o Darwin support o configuration can be reloaded o Support for UNIQUE generated policies o Support for semi anonymous sainfos o Support for ph1id to remoteid matching o Plain RSA authentication o Native LDAP support for Xauth and modecfg o Group membership checks for Xauth and sainfo selection o Camellia cipher support o IKE Fragment force option o Modecfg SplitNet attribute support o Modecfg SplitDNS attribute support ( server side ) o Modecfg Default Domain attribute support o Modecfg DNS/WINS server multiple attribute support
2008-01-18Per the process outlined in revbump(1), perform a recursive revbumptnn1-1/+2
on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
2007-04-11Update to ipsec-tools 0.6.7.ghen2-6/+6
o Fixed SHA256 detection on some systems o Fixed a DoS in Informationnal messages processing (CVE-2007-1841).
2007-02-22Whitespace cleanup, courtesy of pkglint.wiz1-2/+2
Patch provided by Sergey Svishchev in private mail.
2006-10-25Update ipsec-tools to 0.6.6.bad2-6/+6
Changes since 0.6.3: 0.6.6 * src/racoon/isakmp_xauth.c: Build fix * src/racoon/pfkey.c: Sets NAT-T ports to 0 if no NAT encapsulation in pk_sendgetspi(). * src/racoon/pfkey.c: Sets NAT-T ports to 0 if no NAT encapsulation in pk_sendupdate(). * src/racoon/isakmp_xauth.c: fix memory leak * src/racoon/{cfparse.y|handler.h}: typos 0.6.5 * src/racoon/isakmp.c: Fixed zombie PH1 handler when isakmp_send() fails in isakmp_ph1resend() * src/racoon/{cfparse.y|ipsec_doi.c}: Temporary fix for /32 subnets parsing. * src/racoon/isakmp_cfg.c: make software behave as the documentation advertise for INTERNAL_NETMASK4. Keep the old INTERNAL_MASK4 to avoid breaking backward compatibility. * src/racoon/session.c: Fixed / cleaned up signal handling. 0.6.4 * configure.ac src/racoon/plog.c: backported Fred's workaround for %zu problems on (at least) FreeBSD4. * src/racoon/session.c: backport: fix possible race conditions in signal handlers (see session.c 1.17). * src/libipsec/pfkey_dump.c: fixed compilation when NAT_T disabled (Fred has still some CVS problems). * src/libipsec/{libpfkey.h|pfkey_dump.c}: add a sadump_withports function to display SAD entries with their associated ports. * src/setkey/{parse.y|setkey.c|setkey.8}: allow to use setkey -p flag in conjunction with -D to show SADs with the port, allow both get and delete commands to use bracketed ports if needed. * src/racoon/racoon.conf.5: Style changes
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-3/+3
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-2/+2
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-22Update "ipsec-tools" package to version 0.6.3. Changes since 0.6.1:tron2-6/+6
- Various bug fixes - ISAKMP mode config works without Xauth This update fixes the security vulnerability reported in SA17668.
2005-09-02Mark this package as only available on NetBSD 3.0 and newer andtron1-1/+3
Linux 2.6.x and newer.
2005-08-21Update "ipsec-tools" package to version 0.6.1. Changes since 0.6.1rc1:tron3-22/+6
- src/racoon/dnssec.c: fix bogus test on function result - src/racoon/isakmp.c: Improved in/out SA addresses check in purge_remote() - src/libipsec/{key_debug.c|pfkey.c|pfkey_dump.c}: de-lint, warnings - src/racoon/privsep.c: Fixed a %d -> %zu in port_check()
2005-08-07Fix build problem under platforms were "size_t" is not an integer.tron2-1/+17
2005-08-05Update "ipsec-tools" package to version 0.6.1rc1.tron3-8/+22
Changes since version 0.6b2: - NAT-T fixes for situations where NAT-T is not used - OpenSSL 0.9.8 support - keys are not restricted to OpenSSL default size anymore - PKCS7 support - SHA2 support
2005-06-01Fix casing of IPsec in COMMENT.wiz1-2/+2
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo1-3/+3
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-23Removed trailing white-space.rillig1-1/+1
2005-05-10Updated ipsec-tools to 0.6b2.manu3-11/+8
Multiple bug fixes, the most important being NAT-T now working with multiple endpoints behind the same NAT.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-23Missing installed files inPLISTmanu1-1/+18
2005-03-23Upgrade to ipsec-tools 0.6b1.manu2-9/+10
New features: - PAM support - privilege separation
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-20Fix file installation, add missing samples config filesmanu2-4/+29
2005-02-18Upgraded ipsec-tools to release version 0.5manu11-188/+7
2005-01-12Use PKG_SYSCONFDIRkim1-1/+4
2004-12-12Add (unsigned char) cast to ctype functions; taken from the NetBSD trunk.kleink6-1/+117
2004-11-11add additional libraries required by libradius.grant1-1/+2
2004-11-11include libradius/buildlink3.mk only if we're including radiusgrant1-2/+2
support.
2004-11-11include some additional header files on FreeBSD >= 5.grant2-1/+23
2004-11-11allow radius support to be disabled by moving it to PKG_OPTIONS.grant1-2/+12
no PKGREVISION bump as it is still enabled by default.
2004-11-11Remove lex and yacc generated files before building: they might notmanu1-1/+5
match with the libraries installed on the system.
2004-11-10Add patches checksummanu1-1/+3
2004-11-10Fix minor LP64 problemsmanu2-0/+39
2004-11-10Disable nat-t by default as the kernel does not have support for itmanu1-3/+5
without an unofficial patch yet.
2004-11-10This package needs openssl bl3.mk... and it needs NAT-T kernel optionxtraeme1-1/+2
to build...
2004-11-10No need to set BUILDLINK_DEPMETHOD.libradius-linux?= build here...xtraeme1-3/+1
2004-11-10* Fix HOMEPAGE.xtraeme1-7/+5
* No need to use LIBTOOL_OVERRIDE. * Remove unneeded ${EXAMPLESDIR} (??!!) after bl3.mk includes * Remove unneeded BUILD_DEPEND, because this pkg uses bl3 Still libradius is broken...
2004-11-09racoon speaks IKE (ISAKMP/Oakley) key management protocol, tomanu4-0/+82
establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-17 10:42:04 +0000