summaryrefslogtreecommitdiff
path: root/security/isakmpd
AgeCommit message (Collapse)AuthorFilesLines
2003-07-31Convert to the bsd.pkg.install.mk framework by honouring PKG_SYSCONFDIR andjmmv2-29/+38
using RCD_SCRIPTS to handle generation and installation of the rc.d script. Convert the rc.d script to the rc.subr framework too. Bump PKGREVISION to 1.
2003-07-17s/netbsd.org/NetBSD.org/grant1-2/+2
2003-03-29Place WRKSRC where it belongs, to make pkglint happy; ok'ed by wiz.jmmv1-3/+2
2003-02-08fix some format strings for 64 bit systems so this can build with -Werrordmcmahill3-1/+41
2003-01-28Instead of including bsd.pkg.install.mk directly in a package Makefile,jlam1-2/+2
have it be automatically included by bsd.pkg.mk if USE_PKGINSTALL is set to "YES". This enforces the requirement that bsd.pkg.install.mk be included at the end of a package Makefile. Idea suggested by Julio M. Merino Vidal <jmmv at menta.net>.
2002-12-07Replace IGNORE with PKG_FAIL_REASON or PKG_SKIP_REASON as appropriate.schmonz1-2/+2
2002-11-18Updated isakmpd to 20021118martti2-5/+5
* bug fixes
2002-10-25buildlink1 -> buildlink2.wiz3-10/+11
2002-08-30Updated isakmpd to 20020830martti2-5/+5
* OpenBSD 3.1 SA 010: Receiving IKE payloads out of sequence can cause isakmpd(8) to crash. * A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>. Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated. * Handle configuration lines that end in whitespace or ^M. Also avoid a potential memory leak. * Start for support of IKECFG in SET/ACK mode. Server side only so far. * Fix keyed HMAC where the key was longer than the blocksize
2002-04-04Added etc/rc.d/isakmpdmartti1-1/+2
2002-04-04Install a simle startup script (${PREFIX}/etc/rc.d/isakmpd)martti2-1/+31
2002-04-03Updated isakmpd to 20020403martti2-5/+5
- Change DH group handling in the pre-generated parts of the configuration. Add a -GRP{1,2,5} component to transform and suite names to directly specify which group to use. If no group is specified, use DH group 2 (MODP_1024). Earlier transforms and suites using the MD5 hash defaulted to DH group 1, this is no longer true. - Unbreak MD5 and SHA1 passphrases in policy check. - Don't message_dump_raw() bad length messages, i.e too short. - Fix a couple of snprintf length bugs. - Compile without warnings for older/newer OpenSSL.
2002-02-03Updated isakmpd to 20020203.martti2-5/+5
Changes: * bug fixes
2002-01-04Upgrade to latest OpenBSD source tree.martti2-5/+5
- str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintf - strftime format fixes - Don't hang waiting for select() with SIGTERM + no active SA - Add UI option 'R' to trigger isakmpd reinit (same as SIGHUP) ... http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/
2001-11-01Move pkg/ files into package's toplevel directoryzuntum2-1/+1
2001-10-22This is a new version taken from OpenBSD just before their next release.martti4-24/+67
Exact list of changes is unknown (you might take a look at OpenBSD's log entries at http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/)
2001-06-11upgrade to 20010611.itojun4-49/+5
key changes since 20010403: - be more picky about isakmpd.policy permission - debug: dump decoded IKE packets in pcap(3) format - cert improvements - RFC2367 compliance - bug fixes: correct SA refcnt, memory alloc and doc fixes
2001-05-12fix types on 64-bit systems.dmcmahill2-7/+18
2001-04-19Move to sha1 digests, add distfile sizes.agc1-1/+2
2001-04-17+ move the distfile digest/checksum value from files/md5 to distinfoagc2-4/+2
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-04-05no need to link libgmp.itojun3-1/+41
2001-04-04stability; do not free memory region twice.itojun2-1/+20
openbsd sbin/isakmpd/x509.c 1.46 -> 1.47
2001-04-03upgrade to latest openbsd tree.itojun4-20/+12
(isakmpd-20010403.tar.gz is placed into ftp.netbsd.org LOCAL_PORTS directory). major changes from source-changes@openbsd mailing list: use the hash algorithm found in original certificate for the signature after it has been patched. from angelos@ For the GETSPI PFKEY message, use the sequence number from the ACQUIRE message. Make DES a feature, so isakmpd can compile on Linux (most of the fixed by newsham@lava.net) x509 verified to work on NetBSD now
2001-02-24regenwiz1-1/+3
2001-02-24fix installation path. (forgot to cvs add)itojun2-0/+26
2001-02-17Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.wiz2-2/+2
2001-02-15regenwiz1-3/+1
2001-02-14use code checked out on 20010214 from openbsd repository.itojun10-121/+41
too many changes to mention, so pls look at http://www.openbsd.org/plus.html
2000-11-25BSD-style Makefiles require special handling of manual pages.kim4-10/+29
2000-10-04regen with new patchitojun1-1/+2
2000-10-04make it buildable on alpha (need string.h)itojun1-0/+7
2000-09-25Update to 2000-09-15 snapshot, to let this build on NetBSD-1.5, and removefredb5-26/+77
BROKEN variable. Unfortunately, no ChangeLog is available. Patch system dependent make goo to use 'SSLBASE', mirroring it's use in bsd.pkg.mk, rather than obsolete 'PATENTEDOPENSSLSRC'. Also, replace hard- coded "/usr/pkg", replacing it with ${LOCALBASE}. Finally, set 'LOCALBASE' and 'SSLBASE' conditionally within the package, for convenience.
2000-09-09Reorganize crypto handling, as discussed on tech-pkg. Remove allfredb1-6/+2
RESTRICTED= variables that were predicated on former U.S. export regulations. Add CRYPTO=, as necessary, so it's still possible to exclude all crypto packages from a build by setting MKCRYPTO=no (but "lintpkgsrc -R" will no longer catch them). Specifically, - - All packages which set USE_SSL just lose their RESTRICTED variable, since MKCRYPTO responds to USE_SSL directly. - - realplayer7 and ns-flash keep their RESTRICTED, which is based on license terms, but also gain the CRYPTO variable. - - srp-client is now marked broken, since the distfile is evidently no longer available. On this, we're no worse off than before. [We haven't been mirroring the distfile, or testing the build!] - - isakmpd gets CRYPTO for RESTRICTED, but remains broken. - - crack loses all restrictions, as it does not evidently empower a user to utilize strong encryption (working definition: ability to encode a message that requires a secret key plus big number arithmetic to decode).
2000-09-03move BROKEN line so that pkglint is a lot happier about itwiz1-3/+3
2000-09-03add RCS Idwiz1-0/+1
2000-08-21Update IGNORE-messages for recent changes: add ${PKGNAME} wherehubertf1-2/+2
appropriate.
2000-08-18Replace MIRROR_DISTFILES and NO_CDROM with the more descriptive andhubertf1-3/+4
more fine-grained NO_{BIN,SRC}_ON_{FTP,CDROM} definitions. MIRROR_DISTFILES and NO_CDROM are now dead.
2000-06-12add RESTRICTED (crypto) and IGNORE (broken by PF_KEY API change)itojun1-1/+4
2000-04-27make it work with openssl-0.9.5a.itojun2-5/+5
cope with PATENTEDOPENSSLSRC environment (mk.conf needs to be set)
2000-04-25If PATENTEDOPENSSLSRC is present in the build environment, thenthorpej1-1/+6
assume that a full (i.e. "with RSA") OpenSSL installation already exists on the system (and thus a dependency on ../security/openssl is not needed).
2000-04-12check if the system is IPsec ready NetBSD system.itojun1-1/+6
2000-03-27pkgsrc for OpenBSD isakmpd (based on ftp.appli.se snapshot 2000/2/20).itojun8-0/+82
if you are tired of using racoon, you may want to try it. (may not work as expected due to PF_KEY differences) --- This is isakmpd, a BSD-licensed ISAKMP/Oakley (a.k.a. IKE) implementation. It's written by Niklas Hallqvist and Niels Provos, funded by Ericsson Radio Systems AB. Currently it is work in progress, although it can be used for real setups. There are releases, but this distribution is not a release and is not named with ordinary version numbers. When you got the source, hopefully the archive was named with a date which reflects when it was created. These archives are also known as snapshots and will be created at irregular intervals and put up on ftp.gsnig.net and ftp.appli.se in /pub/isakmpd. From Nov 14, 1998 isakmpd is also available in the OpenBSD main source tree under src/sbin/isakmpd, though slightly modified because I don't want to carry support files for other OSes in that distribution. Look at http://www.openbsd.org/ for details on how to get OpenBSD source.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-24 07:24:42 +0000