OpenBSD CVS

CVS log for src/sbin/isakmpd/nat_traversal.c


[BACK] Up to [local] / src / sbin / isakmpd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.25 / (download) - annotate - [select for diffs], Tue Dec 5 20:31:45 2017 UTC (6 years, 6 months ago) by jca
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4, OPENBSD_6_3_BASE, OPENBSD_6_3, HEAD
Changes since 1.24: +5 -5 lines
Diff to previous 1.24 (colored)

Use clock_gettime(CLOCK_MONOTONIC) to schedule timers

From Scott Cheloha, ok tb@

Revision 1.24 / (download) - annotate - [select for diffs], Thu Aug 20 22:05:51 2015 UTC (8 years, 9 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.23: +2 -2 lines
Diff to previous 1.23 (colored)

Do not cast a size_t to (unsigned long) to pass it as an argument to malloc.
Like really, who does??!

Revision 1.23 / (download) - annotate - [select for diffs], Thu Aug 20 22:02:21 2015 UTC (8 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.22: +3 -3 lines
Diff to previous 1.22 (colored)

<stdlib.h> is included, so do not need to cast result from
malloc, calloc, realloc*
ok krw millert

Revision 1.22 / (download) - annotate - [select for diffs], Wed Nov 19 13:35:37 2014 UTC (9 years, 6 months ago) by krw
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.21: +1 -2 lines
Diff to previous 1.21 (colored)

Nuke yet more obvious #include duplications.

ok deraadt@

Revision 1.21 / (download) - annotate - [select for diffs], Mon Oct 29 17:09:52 2012 UTC (11 years, 7 months ago) by markus
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.20: +2 -3 lines
Diff to previous 1.20 (colored)

backout possible infinit-loop (from rev 1.5) when parsing nat_d;
report from Thomas Proell/Siemens ProductCERT; fix from hshoexer; ok mikeb

Revision 1.20 / (download) - annotate - [select for diffs], Sat May 5 17:43:34 2007 UTC (17 years, 1 month ago) by cloder
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4, OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.19: +1 -4 lines
Diff to previous 1.19 (colored)

Kill a log message which looks like an error message but is actually
both meaningless and harmless. ("nat_t_check_vendor_payload: bad size")
ok todd

Revision 1.19 / (download) - annotate - [select for diffs], Mon Apr 16 13:01:39 2007 UTC (17 years, 1 month ago) by moritz
Branch: MAIN
Changes since 1.18: +2 -3 lines
Diff to previous 1.18 (colored)

There's no point in checking ptr for NULL before doing free(ptr)
since free(NULL) is just fine.

ok hshoexer@

Revision 1.18 / (download) - annotate - [select for diffs], Thu Feb 22 10:01:02 2007 UTC (17 years, 3 months ago) by hshoexer
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.17: +6 -1 lines
Diff to previous 1.17 (colored)

Add a comment that explains, why the VID of draft 2 NAT-T includes
a traling '\n'.

suggested by and ok deraadt@, jmc@

Revision 1.17 / (download) - annotate - [select for diffs], Wed Jun 14 14:03:33 2006 UTC (17 years, 11 months ago) by hshoexer
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.16: +2 -2 lines
Diff to previous 1.16 (colored)

indentation.

Revision 1.16 / (download) - annotate - [select for diffs], Mon Jul 25 15:03:47 2005 UTC (18 years, 10 months ago) by hshoexer
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_9, OPENBSD_3_8_BASE, OPENBSD_3_8
Changes since 1.15: +57 -64 lines
Diff to previous 1.15 (colored)

Use payload NAT-D or NAT-D-DRAFT according to NAT-T vendor ID advertised by the
peer.

looks good ho

Revision 1.15 / (download) - annotate - [select for diffs], Thu Jun 2 19:49:23 2005 UTC (19 years ago) by hshoexer
Branch: MAIN
Changes since 1.14: +3 -3 lines
Diff to previous 1.14 (colored)

unbreak port floating, noticed by sean at obstacle9 dot com

ok cloder

Revision 1.10.2.1 / (download) - annotate - [select for diffs], Sun May 29 20:46:24 2005 UTC (19 years ago) by brad
Branch: OPENBSD_3_7
Changes since 1.10: +2 -3 lines
Diff to previous 1.10 (colored) next main 1.11 (colored)

MFC:
Fix by hshoexer@

don't advertise RFC compliance when this doesn't work.

ok markus@ hshoexer@ deraadt@

Revision 1.14 / (download) - annotate - [select for diffs], Wed May 18 20:04:51 2005 UTC (19 years ago) by hshoexer
Branch: MAIN
Changes since 1.13: +3 -3 lines
Diff to previous 1.13 (colored)

allow payload types 20 and 21 for nat-t

ok ho

Revision 1.13 / (download) - annotate - [select for diffs], Fri Apr 8 22:32:10 2005 UTC (19 years, 2 months ago) by cloder
Branch: MAIN
Changes since 1.12: +1 -3 lines
Diff to previous 1.12 (colored)

Make deterministic randomness (only ever used for testing) a compile-time
option.  Reduces chances of somehow setting regrand when it's not supposed
to be set.  Remove "-r" option from man page.  Also xref certpatch(8) while
we are in there.  And remove some include sysdep.h where it is no longer
needed.
OK hshoexer

Revision 1.12 / (download) - annotate - [select for diffs], Tue Apr 5 18:06:06 2005 UTC (19 years, 2 months ago) by cloder
Branch: MAIN
Changes since 1.11: +12 -1 lines
Diff to previous 1.11 (colored)

Add -T flag to isakmpd to disable NAT-T support from the command line.
This lets binat setups work again without having to recompile isakmpd.
OK ho, hshoexer.

Revision 1.11 / (download) - annotate - [select for diffs], Mon Apr 4 19:31:11 2005 UTC (19 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.10: +1 -9 lines
Diff to previous 1.10 (colored)

spacing; ok cloder

Revision 1.10 / (download) - annotate - [select for diffs], Sat Mar 5 12:22:40 2005 UTC (19 years, 3 months ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE
Branch point for: OPENBSD_3_7
Changes since 1.9: +7 -10 lines
Diff to previous 1.9 (colored)

Add RFC3947 NAT-T vendor ID string. hshoexer@ ok.

Revision 1.9 / (download) - annotate - [select for diffs], Sun Feb 27 13:12:12 2005 UTC (19 years, 3 months ago) by hshoexer
Branch: MAIN
Changes since 1.8: +2 -2 lines
Diff to previous 1.8 (colored)

where possible, use bzero instead of memset

ok cloder henning

Revision 1.7.2.1 / (download) - annotate - [select for diffs], Sun Nov 21 19:19:39 2004 UTC (19 years, 6 months ago) by brad
Branch: OPENBSD_3_6
Changes since 1.7: +11 -18 lines
Diff to previous 1.7 (colored) next main 1.8 (colored)

MFC:
Fix by hshoexer@

use hash and not hmac to calculate NAT-D payloads.  Also add NAT-D payload for
the destination address first.  Remove support for obsolete V1 NAT-T.

This fixes interoperability problems with non-openbsd isakmpd implementations.

ok deraadt@ hshoexer@

Revision 1.8 / (download) - annotate - [select for diffs], Thu Nov 18 18:15:46 2004 UTC (19 years, 6 months ago) by hshoexer
Branch: MAIN
Changes since 1.7: +11 -18 lines
Diff to previous 1.7 (colored)

use hash and not hmac to calculate NAT-D payloads.  Also add NAT-D payload for
the destination address first.  Remove support for obsolete V1 NAT-T.

This fixes interoperability problems with non-openbsd isakmpd implementations.

"looks good" ho@, ok markus@ for hash/hmac
testing by various people (thanks!)

Revision 1.7 / (download) - annotate - [select for diffs], Sun Aug 8 19:11:06 2004 UTC (19 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE
Branch point for: OPENBSD_3_6
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

spacing

Revision 1.6 / (download) - annotate - [select for diffs], Tue Aug 3 10:54:09 2004 UTC (19 years, 10 months ago) by ho
Branch: MAIN
Changes since 1.5: +9 -2 lines
Diff to previous 1.5 (colored)

Rewrite the transport reference count code to avoid leaks.
hshoexer@ ok.

Revision 1.5 / (download) - annotate - [select for diffs], Thu Jul 29 08:54:08 2004 UTC (19 years, 10 months ago) by ho
Branch: MAIN
Changes since 1.4: +11 -3 lines
Diff to previous 1.4 (colored)

Repair NAT-T using Aggressive mode, NAT-D checks were in the wrong place.
Noted by Yvan VANHULLEBUS.

Revision 1.4 / (download) - annotate - [select for diffs], Wed Jun 30 10:07:13 2004 UTC (19 years, 11 months ago) by hshoexer
Branch: MAIN
Changes since 1.3: +6 -4 lines
Diff to previous 1.3 (colored)

Compile cleanly with gcc3.3.2.

ok ho@

Revision 1.3 / (download) - annotate - [select for diffs], Mon Jun 21 23:27:10 2004 UTC (19 years, 11 months ago) by ho
Branch: MAIN
Changes since 1.2: +53 -1 lines
Diff to previous 1.2 (colored)

Implement NAT-T keepalive messages.

Revision 1.2 / (download) - annotate - [select for diffs], Sun Jun 20 17:17:35 2004 UTC (19 years, 11 months ago) by ho
Branch: MAIN
Changes since 1.1: +2 -2 lines
Diff to previous 1.1 (colored)

Make the payload array in struct message dynamic, since we need to handle
payloads in the private range, such as the pre-RFC NAT-D/NAT-OA.
Replace TAILQ_FIRST(&msg->payload[i]) instances with function calls.

Revision 1.1 / (download) - annotate - [select for diffs], Sun Jun 20 15:24:05 2004 UTC (19 years, 11 months ago) by ho
Branch: MAIN

NAT-Traversal for isakmpd. Work in progress...
hshoexer@ ok.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.