summaryrefslogtreecommitdiff
path: root/security/isakmpd
AgeCommit message (Collapse)AuthorFilesLines
2004-12-03Rename ALL_TARGET to BUILD_TARGET for consistency with other *_TARGETs.wiz1-2/+2
Suggested by Roland Illig, ok'd by various.
2004-11-22Fix compile problem with gcc34: char argument passed to functions requiringshannonjr2-1/+38
int arg cause compile to fail because -Werror is specified in compile flags. Fix was to add appropriate cast in several places.
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-2/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-04-25Convert to buildlink3.snj1-3/+3
2004-04-23mk/bsd.pkg.install.mk now automatically registersreed1-2/+1
the RCD_SCRIPTS rc.d script(s) to the PLIST. This GENERATE_PLIST idea is part of Greg A. Woods' PR #22954. This helps when the RC_SCRIPTS are installed to a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later, the default RCD_SCRIPTS_EXAMPLEDIR will be changed to be more clear that they are the examples.) These patches also remove the etc/rc.d/ scripts from PLISTs (of packages that use RCD_SCRIPTS). (This also removes now unused references from openssh* makefiles. Note that qmail package has not been changed yet.) I have been doing automatic PLIST registration for RC_SCRIPTS for over a year. Not all of these packages have been tested, but many have been tested and used. Somethings maybe to do: - a few packages still manually install the rc.d scripts to hard-coded etc/rc.d. These need to be fixed. - maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz1-2/+2
Buildlink files: RECOMMENDED version changed to current version.
2003-12-30Get rid of -DNO_RSA in CFLAGS. This causes newer openssl headers tobad2-18/+13
not include <openssl/rsa.h> from <openssl/x509.h>. Fixes PR pkg/23901. While here, apply the patches to properly buildlinkify it for openssl, which I forgot to pass to agc@ for the last update.
2003-11-12PKGREVISION++ after openssl update.jschauma1-1/+2
2003-10-13Obsoleted in 20030903 (and also distinfo-orphaned); this is now fixedkleink1-11/+0
correctly in the stock distribution.
2003-10-10Update to isakmpd version 20030903.agc10-152/+120
No changelog available, but many bugs fixed, and these sources will compile with gcc-3.3.1 (well, after I tweaked them). With thanks to Christoph Badura for most of this work, I merely did the gcc-3.3.1 patching.
2003-09-21Bump PKGREVISION as DES patches allow this to work on -current againjmc1-2/+2
2003-09-21Add some patches so if using openssl >= 0.9.7 the new des API is usedjmc3-1/+119
2003-07-31Convert to the bsd.pkg.install.mk framework by honouring PKG_SYSCONFDIR andjmmv2-29/+38
using RCD_SCRIPTS to handle generation and installation of the rc.d script. Convert the rc.d script to the rc.subr framework too. Bump PKGREVISION to 1.
2003-07-17s/netbsd.org/NetBSD.org/grant1-2/+2
2003-03-29Place WRKSRC where it belongs, to make pkglint happy; ok'ed by wiz.jmmv1-3/+2
2003-02-08fix some format strings for 64 bit systems so this can build with -Werrordmcmahill3-1/+41
2003-01-28Instead of including bsd.pkg.install.mk directly in a package Makefile,jlam1-2/+2
have it be automatically included by bsd.pkg.mk if USE_PKGINSTALL is set to "YES". This enforces the requirement that bsd.pkg.install.mk be included at the end of a package Makefile. Idea suggested by Julio M. Merino Vidal <jmmv at menta.net>.
2002-12-07Replace IGNORE with PKG_FAIL_REASON or PKG_SKIP_REASON as appropriate.schmonz1-2/+2
2002-11-18Updated isakmpd to 20021118martti2-5/+5
* bug fixes
2002-10-25buildlink1 -> buildlink2.wiz3-10/+11
2002-08-30Updated isakmpd to 20020830martti2-5/+5
* OpenBSD 3.1 SA 010: Receiving IKE payloads out of sequence can cause isakmpd(8) to crash. * A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>. Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated. * Handle configuration lines that end in whitespace or ^M. Also avoid a potential memory leak. * Start for support of IKECFG in SET/ACK mode. Server side only so far. * Fix keyed HMAC where the key was longer than the blocksize
2002-04-04Added etc/rc.d/isakmpdmartti1-1/+2
2002-04-04Install a simle startup script (${PREFIX}/etc/rc.d/isakmpd)martti2-1/+31
2002-04-03Updated isakmpd to 20020403martti2-5/+5
- Change DH group handling in the pre-generated parts of the configuration. Add a -GRP{1,2,5} component to transform and suite names to directly specify which group to use. If no group is specified, use DH group 2 (MODP_1024). Earlier transforms and suites using the MD5 hash defaulted to DH group 1, this is no longer true. - Unbreak MD5 and SHA1 passphrases in policy check. - Don't message_dump_raw() bad length messages, i.e too short. - Fix a couple of snprintf length bugs. - Compile without warnings for older/newer OpenSSL.
2002-02-03Updated isakmpd to 20020203.martti2-5/+5
Changes: * bug fixes
2002-01-04Upgrade to latest OpenBSD source tree.martti2-5/+5
- str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintf - strftime format fixes - Don't hang waiting for select() with SIGTERM + no active SA - Add UI option 'R' to trigger isakmpd reinit (same as SIGHUP) ... http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/
2001-11-01Move pkg/ files into package's toplevel directoryzuntum2-1/+1
2001-10-22This is a new version taken from OpenBSD just before their next release.martti4-24/+67
Exact list of changes is unknown (you might take a look at OpenBSD's log entries at http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/)
2001-06-11upgrade to 20010611.itojun4-49/+5
key changes since 20010403: - be more picky about isakmpd.policy permission - debug: dump decoded IKE packets in pcap(3) format - cert improvements - RFC2367 compliance - bug fixes: correct SA refcnt, memory alloc and doc fixes
2001-05-12fix types on 64-bit systems.dmcmahill2-7/+18
2001-04-19Move to sha1 digests, add distfile sizes.agc1-1/+2
2001-04-17+ move the distfile digest/checksum value from files/md5 to distinfoagc2-4/+2
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-04-05no need to link libgmp.itojun3-1/+41
2001-04-04stability; do not free memory region twice.itojun2-1/+20
openbsd sbin/isakmpd/x509.c 1.46 -> 1.47
2001-04-03upgrade to latest openbsd tree.itojun4-20/+12
(isakmpd-20010403.tar.gz is placed into ftp.netbsd.org LOCAL_PORTS directory). major changes from source-changes@openbsd mailing list: use the hash algorithm found in original certificate for the signature after it has been patched. from angelos@ For the GETSPI PFKEY message, use the sequence number from the ACQUIRE message. Make DES a feature, so isakmpd can compile on Linux (most of the fixed by newsham@lava.net) x509 verified to work on NetBSD now
2001-02-24regenwiz1-1/+3
2001-02-24fix installation path. (forgot to cvs add)itojun2-0/+26
2001-02-17Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.wiz2-2/+2
2001-02-15regenwiz1-3/+1
2001-02-14use code checked out on 20010214 from openbsd repository.itojun10-121/+41
too many changes to mention, so pls look at http://www.openbsd.org/plus.html
2000-11-25BSD-style Makefiles require special handling of manual pages.kim4-10/+29
2000-10-04regen with new patchitojun1-1/+2
2000-10-04make it buildable on alpha (need string.h)itojun1-0/+7
2000-09-25Update to 2000-09-15 snapshot, to let this build on NetBSD-1.5, and removefredb5-26/+77
BROKEN variable. Unfortunately, no ChangeLog is available. Patch system dependent make goo to use 'SSLBASE', mirroring it's use in bsd.pkg.mk, rather than obsolete 'PATENTEDOPENSSLSRC'. Also, replace hard- coded "/usr/pkg", replacing it with ${LOCALBASE}. Finally, set 'LOCALBASE' and 'SSLBASE' conditionally within the package, for convenience.
2000-09-09Reorganize crypto handling, as discussed on tech-pkg. Remove allfredb1-6/+2
RESTRICTED= variables that were predicated on former U.S. export regulations. Add CRYPTO=, as necessary, so it's still possible to exclude all crypto packages from a build by setting MKCRYPTO=no (but "lintpkgsrc -R" will no longer catch them). Specifically, - - All packages which set USE_SSL just lose their RESTRICTED variable, since MKCRYPTO responds to USE_SSL directly. - - realplayer7 and ns-flash keep their RESTRICTED, which is based on license terms, but also gain the CRYPTO variable. - - srp-client is now marked broken, since the distfile is evidently no longer available. On this, we're no worse off than before. [We haven't been mirroring the distfile, or testing the build!] - - isakmpd gets CRYPTO for RESTRICTED, but remains broken. - - crack loses all restrictions, as it does not evidently empower a user to utilize strong encryption (working definition: ability to encode a message that requires a secret key plus big number arithmetic to decode).
2000-09-03move BROKEN line so that pkglint is a lot happier about itwiz1-3/+3
2000-09-03add RCS Idwiz1-0/+1
2000-08-21Update IGNORE-messages for recent changes: add ${PKGNAME} wherehubertf1-2/+2
appropriate.
2000-08-18Replace MIRROR_DISTFILES and NO_CDROM with the more descriptive andhubertf1-3/+4
more fine-grained NO_{BIN,SRC}_ON_{FTP,CDROM} definitions. MIRROR_DISTFILES and NO_CDROM are now dead.
2000-06-12add RESTRICTED (crypto) and IGNORE (broken by PF_KEY API change)itojun1-1/+4
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-07 22:55:59 +0000