summaryrefslogtreecommitdiff
path: root/security/racoon
AgeCommit message (Collapse)AuthorFilesLines
2005-02-24Add RMD160 digests.agc1-1/+2
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-1/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-12-02bump version # in binaryitojun1-3/+3
2004-12-02upgrade to 20040818a. staibility fixesitojun2-6/+5
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-1/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-09-22Pass ${MAKE_ENV} when calling ${MAKE}, so that rules in /etc/mk.confkim1-2/+2
(and possibly elsewhere) behave as expected. Without this, the build framework thinks you are not building a package, but base.
2004-06-17upgrade to 20040617a. includes important certificate mangement change.itojun2-7/+7
2004-04-25Convert to buildlink3.snj1-3/+3
2004-04-23mk/bsd.pkg.install.mk now automatically registersreed1-2/+1
the RCD_SCRIPTS rc.d script(s) to the PLIST. This GENERATE_PLIST idea is part of Greg A. Woods' PR #22954. This helps when the RC_SCRIPTS are installed to a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later, the default RCD_SCRIPTS_EXAMPLEDIR will be changed to be more clear that they are the examples.) These patches also remove the etc/rc.d/ scripts from PLISTs (of packages that use RCD_SCRIPTS). (This also removes now unused references from openssh* makefiles. Note that qmail package has not been changed yet.) I have been doing automatic PLIST registration for RC_SCRIPTS for over a year. Not all of these packages have been tested, but many have been tested and used. Somethings maybe to do: - a few packages still manually install the rc.d scripts to hard-coded etc/rc.d. These need to be fixed. - maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-04-12updated to 20040408. properly validate phase 1 signatureitojun2-7/+7
http://www.vuxml.org/freebsd/d8769838-8814-11d8-90d1-0020ed76ef5a.html
2004-04-01update to 2004/4/1 version. drops packet with too big value in length field.itojun2-8/+7
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz1-1/+2
Buildlink files: RECOMMENDED version changed to current version.
2004-01-20Move WRKSRC definition away from the first paragraph in a Makefile.agc1-2/+2
2004-01-16bump to 20040116a. missing ntohs() in info exchange fix.itojun2-7/+7
2004-01-14upgrade to 2004/1/14 tar.gz. fixes hash validation problem posted to bugtraq.itojun2-8/+7
2003-11-12PKGREVISION++ after openssl update.jschauma1-1/+2
2003-08-26upgrade to 20030826. corrects keylen miscomputation.itojun6-117/+13
2003-07-12$NetBSD$itojun4-4/+10
2003-07-12upgrade to 20030711 snapshot. (compiles at least on 1.6.1, not tested on 1.5)itojun5-6/+103
bunch of stability fixes
2003-03-22Install an rc.d script; closes PR pkg/20841 and PR pkg/20842 by David Ferlier.jmmv3-8/+32
Sort the Makefile a bit. Install a default configuration file in place. Bump PKGREVISION to 1.
2002-12-07Replace IGNORE with PKG_FAIL_REASON or PKG_SKIP_REASON as appropriate.schmonz1-2/+2
2002-11-20adjust version date embedded into binaryitojun1-3/+3
2002-11-20upgrade to 20021120.itojun4-36/+12
- fix sha2 computation (was in patch-ag) - plug some memory leaks - more strict isakmp header length check - correct phase 2 proposal reqid handling - check for fd_set overrun
2002-08-25Merge packages from the buildlink2 branch back into the main trunk thatjlam3-6/+6
have been converted to USE_BUILDLINK2.
2002-06-28Add PKG_SYSCONFDIR to BUILD_DEFS.seb1-2/+1
Note: it was already as part of CONFIGURE_ENV value, this change only makes it more "readable" IMHO. Remove explicit addition of PKG_SYSCONFDIR to BUILD_DEFS in a couple of Makefiles.
2002-06-25follow PKG_SYSCONFDIR (hope i did it right this time)itojun1-3/+6
2002-06-17kill USE_SSL, use openssl/buildlink.mk insteaddrochner1-8/+3
(to avoid building against a pkgsrc openssl w/o registering a dependency)
2002-05-20fix sha2 interoperability. From: "JuanJo Ciarlante" <jjo@mendoza.gov.ar>itojun2-1/+25
2002-05-13upgrade to 20020507a. logging issue is fixed. phase 2 negotiation w/itojun4-53/+7
unique policy is corrected.
2002-05-07fix arg to plogv().itojun5-5/+55
2002-04-26upgrade to 20020426a from kame.itojun4-45/+10
file descriptor leak fix. null encryption algorithm key length fix (should use 0). couple of null-pointer reference fixes. set port # to 500 in ID payload (possible interop issue - spec is unclear). correctly match address pair on informational exchange.
2002-04-16*** empty log message ***itojun1-1/+6
2002-04-15correct initial contact handling. PR 15949itojun2-1/+36
2002-04-15sync version number compiled into binary with pkg versionitojun1-2/+2
2001-12-14upgrade to 20011215a.itojun2-5/+5
- memory leaks has been plugged - retransmission logic has improved - 6144 DH MODP group
2001-11-01Move pkg/ files into package's toplevel directoryzuntum2-1/+1
2001-10-26upgrade to 20011026a. 20011016a had a serious bug in tunnel mode SAitojun2-6/+6
establishment.
2001-10-17correct version identification string.itojun1-2/+2
2001-10-17upgrade to 10/16 snapshot.itojun3-16/+7
- bugfixes in spd handling, scheduler leak. - make identity check more strict. - correct phase 2 proposal check.
2001-09-27Mechanical changes to 375 files to change dependency patterns of the formjlam1-2/+2
foo-* to foo-[0-9]*. This is to cause the dependencies to match only the packages whose base package name is "foo", and not those named "foo-bar". A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also change dependency examples in Packages.txt to reflect this.
2001-08-31upgrade to the latest (20010831a). a lot of bug fixes after helsinki IPsec/IKEitojun3-13/+13
bakeoff.
2001-08-06update. fix compilation on alpha.itojun2-6/+6
2001-08-02embed pkg version into binary to help diagnosis.itojun1-1/+2
2001-08-02make it at least compile on netbsd151 systems. kernel API diffs should beitojun3-1/+33
wrapped by configure.in scripts, however, we don't use them for libipsec part.
2001-08-02upgrade to 2001/8/2 KAME tree. whole bunch of stabilization were made.itojun2-5/+5
2001-06-28make sure to link against local libipsec.a.itojun3-8/+18
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
2001-06-12LIBS is automatically added to CONFIGURE_ENV by bsd.pkg.mk ifjlam1-2/+2
GNU_CONFIGURE is defined, so simply set LIBS to the appropriate value.
2001-06-11CPPFLAGS is now passed to MAKE_ENV and CONFIGURE_ENV by bsd.pkg.mk, sojlam1-3/+4
adapt by moving CPPFLAGS settings to top-level, and removing explicit inclusion of CPPFLAGS into MAKE_ENV and CONFIGURE_ENV.
2001-04-22remove "twofish" from sample configuration file, as the algorithmitojun2-8/+22
is not available in *BSD integrated KAME IPsec tree.
2001-04-18upgrade to latest racoon snapshot tar.gz on ftp.kame.net (20010418a).itojun2-4/+5
Wed Apr 11 18:52:26 JST 2001 sakane@ydc.co.jp * racoon: Supported to get a certificate from DNS CERT RR. Also getcertsbyname() is implemented In order to get CERT RRs. This function can use lwres.a if HAVE_LWRES is defined when racoon is compiled. XXX need more local test and interoperability test. XXX should be arranged too many certificate stuff in racoon.conf. 2001-04-10 Jason R. Thorpe <thorpej@zembu.com> * racoon/pfkey.c: pk_recvacquire(): Make sure the phase1 and phase2 handlers are unbound before the phase 2 handler is deleted. * racoon/isakmp.c: ph1_main(), quick_main(): Add the message to the received-list before processing to ensure the packet isn't processed twice in case of an error. isakmp_post_acquire(): Don't unbind the phase1/phase2 handlers; let the caller do it. isakmp_newcookie(): Plug memory leaks. From George Yang <gyang@zembu.com>. * racoon/ipsec_doi.c: get_ph2approvalx(): When we find a matching saprop, make sure to flushsaprop(pr0), as the returned saprop is a copy. Fixes a memory leak. From George Yang <gyang@zembu.com>. * racoon/isakmp_quick.c: quick_r2send(): Make sure to vfree(data) if we fail to allocate a new body. Fixes a memory leak. From George Yang <gyang@zembu.com>. Fri Apr 6 23:25:19 JST 2001 sakane@ydc.co.jp * racoon: implemented to generate the policy in the responder side automatically. If the responder does not have any policy in SPD during phase 2 negotiation, and the directive is set on, then racoon will choice the first proposal in the SA payload from the initiator, and generate policy entries from the proposal. This function is for the responder, and ignored in the initiator case. XXX should be checked tunnel mode case. 2001-04-04 Jason R. Thorpe <thorpej@zembu.com> * racoon: Add support for the Dmalloc debugging malloc library. This library gives very nice memory usage statistics and leak information. Wed Apr 4 22:47:27 JST 2001 sakane@ydc.co.jp * racoon: support scopeid. base code was from <Francis.Dupont@enst-bretagne.fr>. it should be considered more. 2001-04-03 Jason R. Thorpe <thorpej@zembu.com> * racoon: Better integration of debugging malloc libraries. Use wrapper macros (racoon_{malloc,calloc,free,realloc}()) so that debugging malloc implementations can get file/line info, and also put traditional malloc/calloc/free/realloc stubs in the main program so that libraries linked with racoon get the debugging allocators, as well. 2001-03-26 Jason R. Thorpe <thorpej@zembu.com> * racoon/isakmp_ident.c: ident_ir2sendmx(): plug memory leak -- gsstoken wasn't being freed at function exit. 2001-03-26 Jason R. Thorpe <thorpej@zembu.com> * racoon: Changes to Vendor ID payload handling. Determine which VID we will send on a per-proposal basis; we may need to send a different one for each proposal depending on the proposal contents (e.g. GSSAPI auth method). We no longer set the Vendor ID in the localconf. When matching the Vendor ID in check_vendorid(), use a table of known Vendor IDs, and return the index, and maintain a list of extensions that vendors implement (e.g. GSSAPI auth method). XXX We have a slight hack to recognize the Windows 2000 Vendor ID. Need to clarify with the Microsoft IPsec guys. In Aggressive Mode, as responder, when sending first response, make sure to include a Vendor ID payload. In Main Mode, as responder, when sending first response, make sure to include a Vendor ID payload. XXX Still more Vendor ID processing fixes to go. And GSSAPI auth doesn't interoperate with Windows 2000 yet. Thu Mar 22 08:06:30 JST 2001 sakane@ydc.co.jp * racoon: fixed to parse modp1536 of DH group. reported by <shigeru@iij.ad.jp> Thu Mar 22 04:56:57 JST 2001 sakane@ydc.co.jp * racoon/policy.c: fixed to compare between policies when the responder decides to accept the proposal or not. the upper layer protocol is represented by 0 in ID payload. Thu Mar 22 01:45:32 JST 2001 sakane@ydc.co.jp * racoon: fixed potencial of a buffer overrun when adding a ID payload to the ISAKMP payload. It happened when policy is both to use IPSec transport mode and not to specify a transport protocol. reported by <cs@purdue.edu>. Thu Mar 15 20:39:03 JST 2001 sakane@ydc.co.jp * racoon: - fixed a phase 2 handler deletion. racoon will delete a phase2 handler immediately when hard lifetime expires. - check a unit of the timer in the configuration file. 2001-03-06 Jason R. Thorpe <thorpej@zembu.com> * kame/racoon/schedule.c: Implement sched_scrub_param(), which kills all scheduler work queue entries which a specified parameter. * kame/racoon/handler.c: Use sched_scrub_param() to make sure no references to a handler exist when it is freed. 2001-03-05 Jason R. Thorpe <thorpej@zembu.com> * kame/racoon/gssapi.c: Use GSS_C_MECH_CODE when reporting GSSAPI errors. 2001-03-05 Jason R. Thorpe <thorpej@zembu.com> * kame/racoon/handler.c: Implement deleteallph2(), which deletes all Phase 2 handlers for a given src/dst/proto. * kame/racoon/isakmp_inf.c: When processing INITIAL-CONTACT, try to use the SADB_DELETE `delete all' extension and deleteallph2() before doing it The Hard Way. For both The Easy Way and The Hard Way, make sure we only delete SAD entries for SATYPEs that we manage. * kame/racoon/pfkey.c: Use a table of SATYPEs that we manage, and use that table to initialize our PF_KEY state. Thu Feb 22 10:08:27 JST 2001 sakane@ydc.co.jp * racoon: fixed to check the outbound policy when the responder received the 1st packet in phase 2. the tunnel mode and the transport specified the pair of IP addresses of the end of the SA had failed.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-16 17:54:49 +0000