tangled
alpha
login
or
join now
jcs.org
/
openbsd-src
0
fork
atom
jcs's openbsd hax
openbsd
0
fork
atom
overview
issues
pulls
pipelines
openbsd-src
/
sbin
/
iked
/
at
jcs
39 files
Makefile
Add RADIUS support. Authentication, accounting, and "Dynamic Authorization Extensions"(DAE) are supported. feedback markus stu
2 years ago
ca.c
avoid uninitialised variable use found with smatch, ok tb@
7 months ago
chap_ms.c
Upgrade to OpenSSL 1.1 compatible crypto API. Add additional checks where needed.
5 years ago
chap_ms.h
Switch iked to C99-style fixed-width integer types.
10 years ago
config.c
Add handling of "Class" attribute. diff from markus
2 years ago
control.c
Convert sbin and usr.bin to check for imsgbuf_init failure and add imsgbuf_allow_fdpass where needed.
1 year ago
crypto.c
s/ibuf_add_buf/ibuf_add_ibuf/
1 year ago
crypto_api.h
Add experimental post-quantum hybrid key exchange method based on Streamlined NTRU Prime (coupled with X25519).
4 years ago
crypto_hash.c
Add experimental post-quantum hybrid key exchange method based on Streamlined NTRU Prime (coupled with X25519).
4 years ago
dh.c
mop up P-192/Group 25 remnants
11 months ago
dh.h
Add experimental post-quantum hybrid key exchange method based on Streamlined NTRU Prime (coupled with X25519).
4 years ago
eap.c
Fix leak of e = ibuf_static() in error case
1 month ago
eap.h
Add RADIUS support. Authentication, accounting, and "Dynamic Authorization Extensions"(DAE) are supported. feedback markus stu
2 years ago
genmap.sh
Replace <sys/param.h> with <limits.h> and other less dirty headers where possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
11 years ago
iked.8
add -V to usage(), and list it before -v in both SYNOPSIS and the options list;
4 years ago
iked.c
Skip checking for root if we are only doing a config test. Tweaked from a diff from William Rusnack, ok tobhe@ kn@
1 year ago
iked.conf.5
Slightly iprove a confusing wording in the parse.y manuals: The things that need quoting are not necessarily "argument names", and not even necessarily "names" at all, so just talk about "arguments".
2 months ago
iked.h
add a "natt" option that forces negotiation of nat-t (and udpencap).
1 year ago
ikev2.c
Set the pointers to NULL after freeing them to prevent a double free.
5 months ago
ikev2.h
mop up P-192/Group 25 remnants
11 months ago
ikev2_msg.c
Fix some leaks.
9 months ago
ikev2_pld.c
Add RADIUS support. Authentication, accounting, and "Dynamic Authorization Extensions"(DAE) are supported. feedback markus stu
2 years ago
imsg_util.c
ibuf_getdata() abuses the rpos from the ibuf. This is no longer allowed and breaks because ibuf_seek() now uses rpos itself. Now this is just ibuf_get_ibuf() with an extra allocation done. OK tobhe@ tb@
2 years ago
log.c
From a syslog perspective it does not make sense to log fatal and warn with the same severity. Switch log_warn() to LOG_ERR and keep fatal() at LOG_CRIT. OK reyk@ florian@
9 years ago
ocsp.c
Convert to use imsg_get_fd()
2 years ago
parse.y
mop up P-192/Group 25 remnants
11 months ago
pfkey.c
Add RADIUS support. Authentication, accounting, and "Dynamic Authorization Extensions"(DAE) are supported. feedback markus stu
2 years ago
policy.c
Add RADIUS support. Authentication, accounting, and "Dynamic Authorization Extensions"(DAE) are supported. feedback markus stu
2 years ago
print.c
Print "request" instead of "config" if dumping config when "request XX" is used. From William Rusnack, ok tobhe@
1 year ago
proc.c
Convert sbin and usr.bin to check for imsgbuf_init failure and add imsgbuf_allow_fdpass where needed.
1 year ago
radius.c
Add NAS-Port-ID for radius request packets this is suggested by RFC 2869.
9 months ago
smult_curve25519_ref.c
Add support for Curve25519 using the public domain code that is found in OpenSSH. The "private use" DH group 1034 is based on the value that was picked by strongswan recently.
11 years ago
sntrup761.c
Add experimental post-quantum hybrid key exchange method based on Streamlined NTRU Prime (coupled with X25519).
4 years ago
sntrup761.sh
Add experimental post-quantum hybrid key exchange method based on Streamlined NTRU Prime (coupled with X25519).
4 years ago
timer.c
Disable the timer event before attempting to change it
9 years ago
types.h
Add RADIUS support. Authentication, accounting, and "Dynamic Authorization Extensions"(DAE) are supported. feedback markus stu
2 years ago
util.c
Enclose IPv6 address in a square bracket if the address is used with the port number.
2 years ago
version.h
Bump to OpenIKED 7.4
2 years ago
vroute.c
Fail explicitly on unexptected imsg->hdr_type. Otherwise the following comparison is undefined.
2 years ago
jcs.org