OpenBSD CVS

CVS log for src/sbin/isakmpd/cert.c


[BACK] Up to [local] / src / sbin / isakmpd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.33 / (download) - annotate - [select for diffs], Thu Mar 21 04:30:14 2013 UTC (11 years, 2 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4, OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7, OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4, HEAD
Changes since 1.32: +2 -2 lines
Diff to previous 1.32 (colored)

remove excessive includes

Revision 1.32 / (download) - annotate - [select for diffs], Sun Aug 5 09:43:09 2007 UTC (16 years, 10 months ago) by tom
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4, OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.31: +22 -7 lines
Diff to previous 1.31 (colored)

Allow key exchange with RSA signature authentication to work with
Cisco IOS and other initiators that only send their certs in response
to CERT_REQUEST.

With input and help from cloder@, Stuart Henderson, mpf@, and several
others who did lots of testing - thanks to all.

ok hshoexer@

Revision 1.31 / (download) - annotate - [select for diffs], Fri Apr 8 22:32:09 2005 UTC (19 years, 2 months ago) by cloder
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0, OPENBSD_3_9_BASE, OPENBSD_3_9, OPENBSD_3_8_BASE, OPENBSD_3_8
Changes since 1.30: +1 -3 lines
Diff to previous 1.30 (colored)

Make deterministic randomness (only ever used for testing) a compile-time
option.  Reduces chances of somehow setting regrand when it's not supposed
to be set.  Remove "-r" option from man page.  Also xref certpatch(8) while
we are in there.  And remove some include sysdep.h where it is no longer
needed.
OK hshoexer

Revision 1.30 / (download) - annotate - [select for diffs], Fri Apr 8 17:15:01 2005 UTC (19 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.29: +1 -5 lines
Diff to previous 1.29 (colored)

keynote and policy always compiled in

Revision 1.29 / (download) - annotate - [select for diffs], Tue Apr 5 20:46:20 2005 UTC (19 years, 2 months ago) by cloder
Branch: MAIN
Changes since 1.28: +1 -6 lines
Diff to previous 1.28 (colored)

Always compile X509 support. Almost everyone uses it.  Makes the code
much easier to read and to maintain.
OK and testing by hshoexer@, more testing by me

Revision 1.28 / (download) - annotate - [select for diffs], Mon Jun 14 09:55:41 2004 UTC (20 years ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_7, OPENBSD_3_6_BASE, OPENBSD_3_6
Changes since 1.27: +3 -2 lines
Diff to previous 1.27 (colored)

KNF, style, 80c, etc. hshoexer@ ok

Revision 1.27 / (download) - annotate - [select for diffs], Fri May 14 08:42:56 2004 UTC (20 years, 1 month ago) by hshoexer
Branch: MAIN
Changes since 1.26: +10 -10 lines
Diff to previous 1.26 (colored)

Some more KNF, no binary change.

ok ho@

Revision 1.26 / (download) - annotate - [select for diffs], Thu Apr 15 18:39:25 2004 UTC (20 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.25: +71 -77 lines
Diff to previous 1.25 (colored)

partial move to KNF.  More to come.  This has happened because there
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our standard
auditing process.  ok ho hshoexer

Revision 1.25 / (download) - annotate - [select for diffs], Wed Mar 31 10:54:46 2004 UTC (20 years, 2 months ago) by ho
Branch: MAIN
Changes since 1.24: +6 -4 lines
Diff to previous 1.24 (colored)

-Wsign-compare nits. hshoexer@ ok.

Revision 1.24 / (download) - annotate - [select for diffs], Tue Jun 3 14:28:16 2003 UTC (21 years ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_5, OPENBSD_3_4_BASE, OPENBSD_3_4
Changes since 1.23: +1 -6 lines
Diff to previous 1.23 (colored)

Remove clauses 3 and 4. With approval from Niklas Hallqvist and
Niels Provos.

Revision 1.23 / (download) - annotate - [select for diffs], Wed Aug 7 13:19:20 2002 UTC (21 years, 10 months ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_3, OPENBSD_3_2_BASE, OPENBSD_3_2
Changes since 1.22: +15 -3 lines
Diff to previous 1.22 (colored)

A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.
Some style mods, and checks added for OpenSSL version 0.9.7 or later.
Currently CRLs are not supported for earlier versions.
Manual pages updated.

Revision 1.22 / (download) - annotate - [select for diffs], Sun Jun 9 08:13:06 2002 UTC (22 years ago) by todd
Branch: MAIN
Changes since 1.21: +3 -3 lines
Diff to previous 1.21 (colored)

rm trailing whitespace

Revision 1.21 / (download) - annotate - [select for diffs], Thu Jun 6 02:15:27 2002 UTC (22 years ago) by ho
Branch: MAIN
Changes since 1.20: +3 -2 lines
Diff to previous 1.20 (colored)

Style, and a few additional format/type mods.

Revision 1.20 / (download) - annotate - [select for diffs], Sat Jun 1 07:44:21 2002 UTC (22 years ago) by deraadt
Branch: MAIN
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

size_t must be cast to (unsigned long) and printed using %lu

Revision 1.19 / (download) - annotate - [select for diffs], Sat Nov 3 12:15:36 2001 UTC (22 years, 7 months ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE, OPENBSD_3_1
Changes since 1.18: +1 -6 lines
Diff to previous 1.18 (colored)

We get ssl.h with x509.h/libcrypto.h

Revision 1.18 / (download) - annotate - [select for diffs], Tue Jun 5 05:59:42 2001 UTC (23 years ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE, OPENBSD_3_0
Changes since 1.17: +6 -2 lines
Diff to previous 1.17 (colored)

Style issues and commentary

Revision 1.17 / (download) - annotate - [select for diffs], Thu May 31 20:21:25 2001 UTC (23 years ago) by angelos
Branch: MAIN
Changes since 1.16: +6 -3 lines
Diff to previous 1.16 (colored)

Expand the X509 and KeyNote cert handlers.

Revision 1.16 / (download) - annotate - [select for diffs], Sat Oct 7 06:57:08 2000 UTC (23 years, 8 months ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE, OPENBSD_2_9, OPENBSD_2_8_BASE, OPENBSD_2_8
Changes since 1.15: +15 -4 lines
Diff to previous 1.15 (colored)

cert.c: Merge with EOM 1.18
cert.h: Merge with EOM 1.8
libcrypto.c: Merge with EOM 1.14
policy.h: Merge with EOM 1.12
x509.h: Merge with EOM 1.11

author: niklas
Multiple subject name matching, makes certificate interop with PGPnet at least
partly working.  Added some error checking.

Revision 1.15 / (download) - annotate - [select for diffs], Thu Jun 8 20:51:55 2000 UTC (24 years ago) by niklas
Branch: MAIN
Changes since 1.14: +16 -3 lines
Diff to previous 1.14 (colored)

Merge with EOM 1.17

author: angelos
Some more support for KeyNote credential exchange (not yet done).

Revision 1.14 / (download) - annotate - [select for diffs], Fri Apr 7 22:07:07 2000 UTC (24 years, 2 months ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE, OPENBSD_2_7
Changes since 1.13: +9 -7 lines
Diff to previous 1.13 (colored)

Merge with EOM 1.16

author: ho
Missing #ifdef USE_X509 added

Revision 1.13 / (download) - annotate - [select for diffs], Wed Mar 8 08:42:48 2000 UTC (24 years, 3 months ago) by niklas
Branch: MAIN
Changes since 1.12: +8 -4 lines
Diff to previous 1.12 (colored)

cert.c: Merge with EOM 1.15
libcrypto.h: Merge with EOM 1.12

author: ho
KAME and ssl includes

Revision 1.12 / (download) - annotate - [select for diffs], Sat Feb 19 19:32:53 2000 UTC (24 years, 3 months ago) by niklas
Branch: MAIN
Changes since 1.11: +4 -4 lines
Diff to previous 1.11 (colored)

cert.c: Merge with EOM 1.14
ike_auth.c: Merge with EOM 1.43
ike_phase_1.c: Merge with EOM 1.21
init.c: Merge with EOM 1.24
ipsec.c: Merge with EOM 1.117
isakmpd.c: Merge with EOM 1.44
math_group.c: Merge with EOM 1.22

author: niklas
Copyright 2000

author: niklas
Allow isakmpd builders to remove optional parts and save bytes.

Revision 1.11 / (download) - annotate - [select for diffs], Thu Aug 26 22:30:46 1999 UTC (24 years, 9 months ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.10: +4 -5 lines
Diff to previous 1.10 (colored)

regress/rsakeygen/rsakeygen.c: Merge with EOM 1.9
regress/x509/x509test.c: Merge with EOM 1.7
DESIGN-NOTES: Merge with EOM 1.48
README.PKI: Merge with EOM 1.6
TO-DO: Merge with EOM 1.44
cert.c: Merge with EOM 1.12

author: niklas
Add support for dynamic loading of optional facilities, libcrypto first.

Revision 1.10 / (download) - annotate - [select for diffs], Sat Jul 17 21:54:39 1999 UTC (24 years, 11 months ago) by niklas
Branch: MAIN
Changes since 1.9: +25 -3 lines
Diff to previous 1.9 (colored)

regress/rsakeygen/Makefile: Merge with EOM 1.4
regress/rsakeygen/rsakeygen.c: Merge with EOM 1.8
regress/x509/Makefile: Merge with EOM 1.6
regress/x509/x509test.c: Merge with EOM 1.6
regress/Makefile: Merge with EOM 1.8
samples/VPN-east.conf: Merge with EOM 1.6
samples/VPN-west.conf: Merge with EOM 1.6
samples/singlehost-east.conf: Merge with EOM 1.3
samples/singlehost-west.conf: Merge with EOM 1.3
sysdep/openbsd/Makefile.sysdep: Merge with EOM 1.5
x509.h: Merge with EOM 1.6
x509.c: Merge with EOM 1.17
DESIGN-NOTES: Merge with EOM 1.46
Makefile: Merge with EOM 1.55
cert.c: Merge with EOM 1.11
cert.h: Merge with EOM 1.6
exchange.c: Merge with EOM 1.109
exchange.h: Merge with EOM 1.26
ike_auth.c: Merge with EOM 1.32
ike_phase_1.c: Merge with EOM 1.7
init.c: Merge with EOM 1.16
isakmpd.conf.5: Merge with EOM 1.27
README.PKI: Merge with EOM 1.1

author: niklas
From Niels Provos, edited by me: certificate support using SSLeay

Revision 1.9 / (download) - annotate - [select for diffs], Mon Apr 19 19:57:29 1999 UTC (25 years, 1 month ago) by niklas
Branch: MAIN
Changes since 1.8: +22 -17 lines
Diff to previous 1.8 (colored)

./cert.c: Merge with EOM 1.10
./x509.c: Merge with EOM 1.13

Style

Style.  alloc error reporting.  Math error propagation.  Allocate right
sizes.

1999 copyrights

Revision 1.8 / (download) - annotate - [select for diffs], Fri Feb 26 03:34:02 1999 UTC (25 years, 3 months ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_2_5_BASE, OPENBSD_2_5
Changes since 1.7: +4 -2 lines
Diff to previous 1.7 (colored)

Merge from the Ericsson repository
| revision 1.7
| date: 1999/02/25 11:38:45;  author: niklas;  state: Exp;  lines: +3 -1
| include sysdep.h everywhere
| ----------------------------

Revision 1.7 / (download) - annotate - [select for diffs], Tue Nov 17 11:10:08 1998 UTC (25 years, 6 months ago) by niklas
Branch: MAIN
Changes since 1.6: +2 -1 lines
Diff to previous 1.6 (colored)

Add RCS Ids from the EOM repository

Revision 1.6 / (download) - annotate - [select for diffs], Mon Nov 16 21:07:16 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN
Changes since 1.5: +1 -3 lines
Diff to previous 1.5 (colored)

Reinstate X509 signature code except for RSA code

Revision 1.5 / (download) - annotate - [select for diffs], Mon Nov 16 12:30:45 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN
Changes since 1.4: +3 -1 lines
Diff to previous 1.4 (colored)

Remove X509 hooks

Revision 1.4 / (download) - annotate - [select for diffs], Mon Nov 16 12:24:13 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN
Changes since 1.3: +0 -0 lines
Diff to previous 1.3 (colored)

revive

Revision 1.3, Sun Nov 15 00:52:26 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN
Changes since 1.2: +1 -1 lines
FILE REMOVED

Not clean enough yet

Revision 1.2 / (download) - annotate - [select for diffs], Sun Nov 15 00:43:50 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN
Changes since 1.1: +1 -1 lines
Diff to previous 1.1 (colored)

openBSD RCS IDs

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Sun Nov 15 00:03:48 1998 UTC (25 years, 7 months ago) by niklas
Branch: NIKLAS
CVS Tags: NIKLAS_981114
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

Initial import of isakmpd, an IKE (ISAKMP/Oakley) implementation for the
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by
Ericsson Radio Systems.  It is not yet complete or usable in a real scenario
but the missing pieces will soon be there.  The early commit is for people
who wants early access and who are not afraid of looking at source.
isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so
far, so it is not that incomplete.  It is really mostly configuration that
is lacking.

Revision 1.1 / (download) - annotate - [select for diffs], Sun Nov 15 00:03:48 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.