OpenBSD CVS

CVS log for src/sbin/isakmpd/ipsec_num.cst


[BACK] Up to [local] / src / sbin / isakmpd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.21 / (download) - annotate - [select for diffs], Fri Oct 22 12:30:54 2021 UTC (2 years, 7 months ago) by bluhm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, HEAD
Changes since 1.20: +1 -3 lines
Diff to previous 1.20 (colored)

After deleting hifn(4) the only provider for the LZS compression
algorithm is gone.  Reomve all LZS references from the tree.  The
v42bis in isakmpd also looks unsupported.
OK mvs@ patrick@ sthen@

Revision 1.20 / (download) - annotate - [select for diffs], Fri Oct 27 08:29:32 2017 UTC (6 years, 7 months ago) by mpi
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4, OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.19: +10 -1 lines
Diff to previous 1.19 (colored)

Support DH groups 19 to 21 and 25 to 30, just like iked(8) does.

ok visa@, markus@

Revision 1.19 / (download) - annotate - [select for diffs], Sat Jun 30 14:51:31 2012 UTC (11 years, 11 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7, OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.18: +2 -2 lines
Diff to previous 1.18 (colored)

enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP
ok mikeb@

Revision 1.18 / (download) - annotate - [select for diffs], Fri May 13 07:41:20 2011 UTC (13 years, 1 month ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.17: +2 -2 lines
Diff to previous 1.17 (colored)

wrong id for UDP_ENCAP_TRANSPORT_DRAFT; ok mikeb@

Revision 1.17 / (download) - annotate - [select for diffs], Wed Sep 22 13:45:16 2010 UTC (13 years, 8 months ago) by mikeb
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.16: +3 -1 lines
Diff to previous 1.16 (colored)

Support for use of AES-GCM-16 (as AESGCM) and ENCR_NULL_AUTH_AES_GMAC
(as AESGMAC) ciphers in the ISAKMP Phase 2 (aka Quick Mode).

Thoroughly tested by me and naddy.  Works fine with Linux.

Requires updated pfkeyv2.h include file.

ok naddy

Revision 1.16 / (download) - annotate - [select for diffs], Tue Jun 14 10:50:47 2005 UTC (19 years ago) by hshoexer
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4, OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0, OPENBSD_3_9_BASE, OPENBSD_3_9, OPENBSD_3_8_BASE, OPENBSD_3_8
Changes since 1.15: +5 -5 lines
Diff to previous 1.15 (colored)

add ENCAP_UDP_{TUNNEL,TRANSPORT} types according to rfc 3947

ok markus

Revision 1.15 / (download) - annotate - [select for diffs], Wed Apr 28 14:40:00 2004 UTC (20 years, 1 month ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_7, OPENBSD_3_6_BASE, OPENBSD_3_6
Changes since 1.14: +5 -3 lines
Diff to previous 1.14 (colored)

Reserve some payload numbers for RFC 3547 and the earlier NAT-T drafts. hshoexer@ ok.

Revision 1.14 / (download) - annotate - [select for diffs], Mon Dec 15 10:06:42 2003 UTC (20 years, 6 months ago) by hshoexer
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_5
Changes since 1.13: +6 -1 lines
Diff to previous 1.13 (colored)

Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14
to 18).

ok ho@

Revision 1.13 / (download) - annotate - [select for diffs], Tue Jun 3 14:28:16 2003 UTC (21 years ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE, OPENBSD_3_4
Changes since 1.12: +1 -6 lines
Diff to previous 1.12 (colored)

Remove clauses 3 and 4. With approval from Niklas Hallqvist and
Niels Provos.

Revision 1.12 / (download) - annotate - [select for diffs], Wed May 14 17:37:22 2003 UTC (21 years, 1 month ago) by ho
Branch: MAIN
Changes since 1.11: +2 -2 lines
Diff to previous 1.11 (colored)

I did not test this enough. Unbreak.

Revision 1.11 / (download) - annotate - [select for diffs], Mon May 12 21:42:11 2003 UTC (21 years, 1 month ago) by ho
Branch: MAIN
Changes since 1.10: +7 -2 lines
Diff to previous 1.10 (colored)

Add two more encapsulation types (UDP encap, potential future NAT-T)
Add BLOCK_SIZE attribute
Rename IPSEC_ESP_AES -> IPSEC_ESP_AES_128_CBC.

Revision 1.10 / (download) - annotate - [select for diffs], Fri Jun 14 12:43:11 2002 UTC (22 years ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_3, OPENBSD_3_2_BASE, OPENBSD_3_2
Changes since 1.9: +2 -1 lines
Diff to previous 1.9 (colored)

Recognize the ECN_TUNNEL attribute.

Revision 1.9 / (download) - annotate - [select for diffs], Fri Jun 7 20:50:12 2002 UTC (22 years ago) by ho
Branch: MAIN
Changes since 1.8: +12 -1 lines
Diff to previous 1.8 (colored)

Extend as per current IANA assignments

Revision 1.7.6.1 / (download) - annotate - [select for diffs], Thu Feb 21 04:18:57 2002 UTC (22 years, 3 months ago) by jason
Branch: OPENBSD_3_0
Changes since 1.7: +6 -1 lines
Diff to previous 1.7 (colored) next main 1.8 (colored)

Pull in patch from current:
Fix (ho):
Add the (former) AES candidate ESP ciphers for IKE, as of
http://csrc.nist.gov/ipsec/papers/aes-draft.00.txt
In particular, recognize a Twofish proposal with cipher number 253, as
used by the SSH Sentinel.

Revision 1.8 / (download) - annotate - [select for diffs], Sun Jan 27 01:56:31 2002 UTC (22 years, 4 months ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE, OPENBSD_3_1
Changes since 1.7: +6 -1 lines
Diff to previous 1.7 (colored)

Add the (former) AES candidate ESP ciphers for IKE, as of
http://csrc.nist.gov/ipsec/papers/aes-draft.00.txt
In particular, recognize a Twofish proposal with cipher number 253, as used
by the SSH Sentinel.

Revision 1.7 / (download) - annotate - [select for diffs], Mon Oct 16 23:27:55 2000 UTC (23 years, 7 months ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE, OPENBSD_2_9_BASE, OPENBSD_2_9, OPENBSD_2_8_BASE, OPENBSD_2_8
Branch point for: OPENBSD_3_0
Changes since 1.6: +7 -2 lines
Diff to previous 1.6 (colored)

ipsec_num.cst: Merge with EOM 1.5
isakmpd.policy.5: Merge with EOM 1.22

author: angelos
Add RIPEMD negotiation/configuration.

Revision 1.6 / (download) - annotate - [select for diffs], Mon Oct 9 23:27:31 2000 UTC (23 years, 8 months ago) by niklas
Branch: MAIN
Changes since 1.5: +10 -2 lines
Diff to previous 1.5 (colored)

samples/VPN-3way-template.conf: Merge with EOM 1.8
samples/VPN-east.conf: Merge with EOM 1.12
samples/VPN-west.conf: Merge with EOM 1.13
samples/policy: Merge with EOM 1.6
samples/singlehost-west.conf: Merge with EOM 1.9
samples/singlehost-east.conf: Merge with EOM 1.9
conf.c: Merge with EOM 1.37
ipsec.c: Merge with EOM 1.133
ipsec_num.cst: Merge with EOM 1.4
isakmpd.conf.5: Merge with EOM 1.48
isakmpd.policy.5: Merge with EOM 1.21
policy.c: Merge with EOM 1.46

author: angelos
AES support.

Revision 1.5 / (download) - annotate - [select for diffs], Wed Jun 2 06:32:06 1999 UTC (25 years ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE, OPENBSD_2_7, OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.4: +3 -2 lines
Diff to previous 1.4 (colored)

Merge with EOM 1.3

author: niklas
Initial stab at Oakley group 5, still an XXX though.

Revision 1.4 / (download) - annotate - [select for diffs], Fri Nov 20 07:34:07 1998 UTC (25 years, 6 months ago) by niklas
Branch: MAIN
CVS Tags: OPENBSD_2_5_BASE, OPENBSD_2_5
Changes since 1.3: +9 -9 lines
Diff to previous 1.3 (colored)

Add submaps to constant maps, and add a mechanism to the constant
description language to link maps.

Revision 1.3 / (download) - annotate - [select for diffs], Tue Nov 17 11:10:14 1998 UTC (25 years, 6 months ago) by niklas
Branch: MAIN
Changes since 1.2: +2 -1 lines
Diff to previous 1.2 (colored)

Add RCS Ids from the EOM repository

Revision 1.2 / (download) - annotate - [select for diffs], Sun Nov 15 00:43:56 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN
Changes since 1.1: +1 -1 lines
Diff to previous 1.1 (colored)

openBSD RCS IDs

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Sun Nov 15 00:03:48 1998 UTC (25 years, 7 months ago) by niklas
Branch: NIKLAS
CVS Tags: NIKLAS_981114
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

Initial import of isakmpd, an IKE (ISAKMP/Oakley) implementation for the
OpenBSD IPSEC stack by me, Niklas Hallqvist and Niels Provos, funded by
Ericsson Radio Systems.  It is not yet complete or usable in a real scenario
but the missing pieces will soon be there.  The early commit is for people
who wants early access and who are not afraid of looking at source.
isakmpd interops with Cisco, Timestep, SSH & Pluto (Linux FreeS/WAN) so
far, so it is not that incomplete.  It is really mostly configuration that
is lacking.

Revision 1.1 / (download) - annotate - [select for diffs], Sun Nov 15 00:03:48 1998 UTC (25 years, 7 months ago) by niklas
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.