summaryrefslogtreecommitdiff
path: root/security/racoon/files
AgeCommit message (Collapse)AuthorFilesLines
2005-04-21racoon development have stopped. use security/ipsec-tools.itojun1-19/+0
2003-03-22Install an rc.d script; closes PR pkg/20841 and PR pkg/20842 by David Ferlier.jmmv1-0/+19
Sort the Makefile a bit. Install a default configuration file in place. Bump PKGREVISION to 1.
2001-04-17+ move the distfile digest/checksum value from files/md5 to distinfoagc2-9/+0
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-02-22update to 2001/2/22 snapshot.itojun1-2/+2
sync up with majority interpretation on tunnel mode bundle proposal. lots of IKE implementation proposes "IP AH ESP IP payload" as "AH tunnel and ESP tunnel". couple of other minor fixes
2001-02-18upgrade: 20001211a -> 20010215aitojun2-4/+3
key changes: -B flag, DH shared secret length handling fix, logging level fix, gssapi support (not enabled, may not work on plain 1.5 due to issue in kerberos library)
2000-12-12remove bogus bound-check. need revisit (DoS issue is not re-introduced).itojun1-1/+2
sync with kame
2000-12-11upgrade to the latest (2000/12/11). most important change is that prioritojun1-2/+2
versions had DoS possiblity, due to insufficient length check.
2000-11-11upgrade to 11/11a. better support for multiple address on a single IF,itojun1-2/+2
and IPv6 address properties (deprecated, tentative).
2000-11-06upgrade to 20001106a.itojun2-4/+3
- validate initial contact better. - more fine-grained control over pre-shared key configuration. - cert fixes.
2000-11-06do not return negative value from internal random() function.itojun1-1/+2
from shigeru@iij.ad.jp. sync with KAME.
2000-10-10aupdate to 2000/10/10a.itojun1-2/+2
- always use random number from /dev/urandom, instead of random(3). - OpenSSL dependency is simplified - just use USE_SSL, and assume that RSA function is there. pkgsrc does not really support intermediate netbsd-current codebase. per discussion on packages@netbsd.org. approved by packages@netbsd.org
2000-10-04upgrade to 10/4 snapshot.itojun2-5/+4
- disable idea/rc5 in phase 1 by default - use official DOI # for AES (= rijndael) - be more careful about parsing variable-length packet content - have __attribute__((__packed__)), be friendly with align-picky arch (confirmed to be working on i386, sh3 and alpha)
2000-09-24disable admin port better (KAME session.c 1.13 -> 1.14)itojun1-1/+2
2000-09-23upgrade to 9/23 snapshot.itojun2-4/+4
changes: lots of stabilization (made during interop tests with bunch of other implementations), certificate support improvement, security issue fix (admin tcp port, without authentication, was open previously)
2000-09-12upgrade to 9/13b. it fixes fatal bug in phase 1 negotiation.itojun1-2/+2
2000-09-12upgrade racoon to 2000/9/12.itojun2-5/+4
certificate improvements. bug fix in policy matching. make pfs/policy matching strictness configurable. other logs can be found at http://www.kame.net/dev/cvsweb.cgi/kame/CHANGELOG.
2000-08-04Fix a bug where the parser would fail if a keylength was notthorpej1-1/+2
explicitly specified in a Phase-1 proposal statement. Patch sent to sakane@kame.net.
2000-07-30update to latest (7/31), to sync with /usr/include/netinet6/ipsec.h change.itojun2-4/+4
- improvements in multiple address case - sync with improvements in INET2000 bakeoff
2000-07-18update to 20000719a.itojun1-2/+2
changes: basically, result from TAHI 2nd interop test (www.tahi.org) - phase 1/2 SA removal corrections - remove possible memory leak - no notify message on information exchange - correct isakmp payload manipulation on duplicated payload types
2000-07-18update from racoon 20000701a tree to 20000716a tree.itojun1-2/+2
changes: - RFC2367 conformance for SADB_[AE]ALG_xxx. - implement initial contact - runs in background by default - delete notification - improve error handling
2000-07-01use more recent code from kame(7/1).itojun1-2/+2
changes from 6/14: - improved internal data garbage collection - avoid sending packet that constitutes invalid exchange - "non_auth" setting will avoid negotiating ESP authentication - improve notify message
2000-06-20upgrade to more recent (2000/6/20).itojun1-2/+2
-- full changelog Mon Jun 19 18:23:15 JST 2000 sakane@ydc.co.jp * kame/kame/racoon: A path name in configuration file is always complemented if it is not begin from slash(/). If it's begin from slash, a path name never be complemented. Mon Jun 19 16:51:24 JST 2000 sakane@ydc.co.jp * kame/kame/racoon: If "non_auth" is defined in racoon.conf, any transform of AH proposal including "non_auth" is not sent to the peer. Thu Jun 15 14:44:30 JST 2000 sakane@ydc.co.jp * kame/kame/racoon: CR payload is only made if signature authentication method is applied. Thu Jun 15 13:29:29 JST 2000 sakane@ydc.co.jp * kame/kame/racoon/cfparse.y: In racoon.conf, the path of configuration file is complemented by include directive only if there is no '/' in the path.
2000-06-14upgrade to 2000/6/14 snapshot. changes:itojun1-2/+2
- SA bundle (AH + ESP) negotiation is corrected - be more picky about permission of pre-shared key file (don't open it it it looks vulnerable).
2000-06-12add files/md5. From: Bernd Ernestiitojun2-16/+3
2000-06-12build 20000612 KAME racoon IKE daemon, by pulling tar.gz from ftp.kame.netitojun1-2/+5
(does not use anoncvs any more). changes in racoon itself is way too many to mention. for full changelog refer http://www.kame.net/dev/cvsweb.cgi/kame/CHANGELOG.
2000-04-04pkgsrc build for racoon IKE daemonitojun2-0/+19
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-06 23:51:13 +0000