Permalink
Commits on Feb 22, 2001
  1. removed about static_sa.

    sakane committed Feb 22, 2001
  2. * racoon:

    fixed to check the outbound policy when the responder received the
    1st packet in phase 2.  the tunnel mode and the transport specified
    the pair of IP addresses of the end of the SA had failed.
    sakane committed Feb 22, 2001
  3. fixed to check the outbound policy of responder.

    sakane committed Feb 22, 2001
  4. described about the log file.

    sakane committed Feb 22, 2001
Commits on Feb 21, 2001
  1. * sys/netinet6/{dest6,nd6}.c: make variable length header parsing

      pickier.
    * openbsd/include/netdb.h: change ai_addrlen from int to socklen_t,
      to conform to 2553bis-03.
    itojun committed Feb 21, 2001
  2. change ai_addrlen to socklen_t. now it conforms to

    draft-ietf-ipngwg-rfc2553bis-03.txt.  backward compatibility concern:
    - should be safe to change signed to unsigned, as we never return
      negative value.
    - sizeof(int) is 4 for all archs, so there's no size change with socklen_t
      (= u_int32_t)
    
    commented by deraadt.
    itojun committed Feb 21, 2001
  3. style

    itojun committed Feb 21, 2001
  4. no need to compute nd6 option length twice

    itojun committed Feb 21, 2001
  5. be more picky about option length validation.

    itojun committed Feb 21, 2001
  6. make sure we always check dstoptlen < IP6OPT_MINLEN.

    "options MIP6" was vulnerable.
    itojun committed Feb 21, 2001
  7. add missing soclose() on accept failure.

    itojun committed Feb 21, 2001
  8. make sure to soclose() on failure. from jinmei

    itojun committed Feb 21, 2001
  9. 2.5.1p1

    itojun committed Feb 21, 2001
  10. bsd mbuf management rule in netiso processing - child function frees …

    …mbuf
    
    on error.
    itojun committed Feb 21, 2001
  11. * racoon:

    changed the proposal order of the protocol in the phase 2.
    If we want to make a packet "IP2 AH ESP IP1 ULP", the SPD in KAME
    expresses AH transport + ESP tunnel.  racoon sent the proposal
    contained such the order.  But lots of implementation interprets
    AH tunnel + ESP tunnel in this case.  racoon changes the order,
    and usually uses this format.  If the option, 'complex_bundle'
    is enable, racoon uses old format.
    sakane committed Feb 21, 2001
  12. wording.

    sakane committed Feb 21, 2001
  13. minor cleanups (missing break)

    itojun committed Feb 21, 2001
  14. If we want to make a packet "IP2 AH ESP IP1 ULP", the SPD in KAME exp…

    …resses
    
    AH transport + ESP tunnel.  So racoon sent the proposal contained such the
    order.  But lots of implementation interprets AH tunnel + ESP tunnel
    in this case.  racoon changes the format, usually uses this format.
    If the option, 'complex_bundle' is enable, racoon uses old format.
    sakane committed Feb 21, 2001
  15. * openbsd/usr.sbin/pim6{sd,dd}: compile these on openbsd.

      not really tested.
    * sys/netinet6/ah_{core,output}.c: one more correction to IPv4 option
      chasing in AH processing.
    itojun committed Feb 21, 2001
  16. supply pim6* for openbsd.

    itojun committed Feb 21, 2001
  17. call encap_init on all protosw entry that uses encap[46]_input.

    this will reduce chances for future mistakes.
    itojun committed Feb 21, 2001
  18. call encap_init on every protosw entry that uses encap[46]_input.

    now encap_init is safe against multiple invocations.
    itojun committed Feb 21, 2001
  19. tighten LSRR option header parsing more. the option length must be at…

    … least
    
    6, as we will try to look at ip address in it.
    itojun committed Feb 21, 2001
  20. tighten IPv4 option handling in AH computation more. ip option should be

    longer than 2 bytes if they are not EOL nor NOP.
    itojun committed Feb 21, 2001
  21. no need for global *ehdr.

    itojun committed Feb 21, 2001
  22. need ATOMIC|ADDR on EON

    itojun committed Feb 21, 2001
  23. typo in EON support.

    itojun committed Feb 21, 2001
Commits on Feb 20, 2001
  1. wording.

    jinmei committed Feb 20, 2001
  2. note EON support (ISO over IPv4/6) on netbsd

    itojun committed Feb 20, 2001
  3. typo

    itojun committed Feb 20, 2001
  4. add missing AF_ISO case.

    itojun committed Feb 20, 2001
  5. add IFT_GIF case.

    itojun committed Feb 20, 2001