End of changelog debian package isakmpd.20031107-1
--------------------------------------------------

2003-11-06 17:12  ho

        * dnssec.c, exchange.c, field.c, if.c, ike_auth.c, ipsec.c, key.c,
          log.c, message.c, message.h, monitor_fdpass.c, pf_key_v2.c,
          policy.c, ui.c, x509.c, x509.h: Style nits.

2003-11-06 16:55  ho

        * exchange.c, message.c: Require encrypted messages are soon as we
          have the keystate for it.  Require DELETE payloads to be
          accompanied by HASHes, and add validation for HASH payloads
          without active exchanges.  From Hans-Joerg Hoexer with various
          modifications and suggestions from me and markus@. Ok markus@.

2003-11-06 16:50  ho

        * ipsec.c: spis[] type tweak. From Hans-Joerg Hoexer.

2003-11-05 13:55  jmc

        * isakmpd.conf.5: PFS: Perfect Forward Secrecy (RFC 2409); from
          misc@ and ok markus@

2003-11-05 13:31  jmc

        * QUESTIONS: updated URL from Jared Yanovich;

2003-10-25 22:47  mcbride

        * isakmpd.policy.5: OpenSSL generates DNs with emailAddress, not
          Email.

2003-10-25 09:47  jmc

        * isakmpd.8: receiveing -> receiving; from Jared Yanovich;

2003-10-14 16:29  ho

        * exchange.c, ike_auth.c, ike_phase_1.c, ipsec.c, isakmp_doi.c:
          constant_lookup() to constant_name() cleanup. markus@ ok.

2003-10-13 15:57  ho

        * isakmpd.8, log.h, ui.c: Add a UI FIFO debug class. ok markus@
          plus I think henning@

2003-10-04 19:29  cloder

        * ike_phase_1.c: Avoid crash on invalid config file (missing value
          for LIFE_DURATION).  OK ho@

2003-09-26 17:59  aaron

        * sysdep/freeswan/klips.c: Fix off-by-ones in format string for 's'
          specifier; millert@, deraadt@ ok

2003-09-26 13:29  cedric

        * udp.c: don't listen to INADDR_ANY if Listen-on is specified.
          patch from markus@, ok ho@

2003-09-26 00:28  aaron

        * monitor.c: Fix off-by-one out-of-bounds write; millert@ ok

2003-09-25 16:15  cloder

        * exchange.c, if.c: Fix one case of set length before realloc.  Fix
          another case of foo = realloc(foo...) and avoid possible memory
          leaks.  Avoid leaving things pointing to freed memory on failure.

2003-09-24 13:12  markus

        * crypto.c, crypto.h, regress/crypto/cryptotest.c: re-add AES, but
          without using EVP; patch from Hans-Joerg.Hoexer at
          yerbouti.franken.de; ok ho@ (interops with isakmpd+AES in OpenBSD
          3.4)

2003-09-24 12:13  markus

        * crypto.c, crypto.h, regress/crypto/cryptotest.c: back out EVP
          change; causes fd leaks; ok cedric@



End of changelog debian package isakmpd.20030907-1
--------------------------------------------------

2003-09-05 09:50  tedu

	* monitor.c: socket leak on error paths.  from Patrick Latifi.	ok
	  deraadt@ ho@

2003-09-02 20:15  ho

	* conf.c, ipsec.c: A couple of nits. deraadt@ ok.

2003-09-02 20:14  ho

	* message.c: Require ISAKMP_FLAGS_ENC on phase 2 messages. ok
	  markus@, deraadt@.

2003-09-02 20:11  ho

	* sysdep/linux/: bitstring.h, sys/queue.h: For easier compilation
	  on linux systems. Requested by Thomas Walpuski.

2003-08-28 16:43  markus

	* Makefile, TO-DO, conf.c, crypto.c, crypto.h, isakmpd.conf.5,
	  regress/crypto/Makefile, regress/crypto/cryptotest.c: support AES
	  in phase 1, too. switch to OpenSSL EVP interface; with
	  Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@

2003-08-20 16:43  ho

	* samples/singlehost-west.conf: Zap an old "Identification" tag in
	  this sample config. I have no idea what it was supposed to do and
	  in any case there is no reference to this tag in current code.
	  Pointed out by Fridtjof Busse.

2003-08-20 14:25  ho

	* isakmpd.8: certpatch(8) can be used to create FQDN X509v3
	  extensions too.  From Fridtjof Busse, via henning@. Thanks.


End of changelog debian package isakmpd.20030820-1
--------------------------------------------------

2003-07-09 10:16  jmc

	* isakmpd.conf.5, isakmpd.policy.5: - remove some .Ss's that worked
	  around the old blank line bug - remove some unnecessary .Pp's -
	  mdoc a list

	  ok ho@

2003-06-20 11:14  ho

	* transport.c: Be a bit more verbose when we give up on ever seeing
	  a response to the last message we sent out. In case we initiated
	  the exchange, one possible and common reason is a network level
	  problem (pf, routing, whatnot), if we're the responder, there is
	  also the possibility we were scanned by something like ike-scan.
	  markus@ ok.

2003-06-17 23:56  millert

	* sysdep/common/libsysdep/: strlcat.c, strlcpy.c: Sync with
	  share/misc/license.template and add missing DARPA credit where
	  applicable.

2003-06-15 12:32  ho

	* exchange.c: ID copying should happen earlier in exchange_finalize
	  so that we won't lose data during rekeying. From Jean-Francois
	  Dive.

2003-06-14 13:47  ho

	* message.c: allocate payload_node with calloc instead of malloc

2003-06-13 05:50  brad

	* ipsec.c: MFC: Fix from ho@

	  Do not crash on unsupported IPSec ID types, as noted by Eric
	  Boudrand.

	  deraadt@ millert@ ok

2003-06-13 05:34  brad

	* ipsec.c: MFC: Fix from ho@

	  Do not crash on unsupported IPSec ID types, as noted by Eric
	  Boudrand.

	  deraadt@ millert@ ok

2003-06-10 18:41  deraadt

	* conf.c, exchange.c, ike_auth.c, ike_phase_1.c, ike_quick_mode.c,
	  isakmp_cfg.c, log.c, monitor.c, monitor.h, pf_key_v2.c, policy.c,
	  transport.c, udp.c, x509.c: boring cleanups

2003-06-10 14:21  ho

	* ipsec.c: Do not crash on unsupported IPSec ID types, as noted by
	  Eric Boudrand.

2003-06-04 09:31  ho

	* exchange.c, ike_aggressive.c, ike_auth.c, ike_phase_1.c,
	  ike_quick_mode.c, init.c, ipsec.c, ipsec.h, isakmpd.8, isakmpd.c,
	  isakmpd.policy.5, libcrypto.c, libcrypto.h, message.c, message.h,
	  pf_key_v2.c, policy.c, policy.h, sa.c, sa.h, udp.c, x509.c,
	  x509.h, apps/certpatch/certpatch.8, apps/certpatch/certpatch.c,
	  regress/ec2n/ec2ntest.c, regress/hmac/hmactest.c: Remove the rest
	  of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos D.
	  Keromytis and Niels Provos.

2003-06-04 09:27  ho

	* DESIGN-NOTES: Remove 3 and 4 from the "license to use"

2003-06-03 17:20  ho

	* sysdep/linux/: GNUmakefile.sysdep, sysdep-os.h, sysdep.c: Remove
	  clause 3. Approved by niklas@ and Thomas Walpuski.

2003-06-03 17:02  ho

	* sysdep/linux/README: Obsolete.

2003-06-03 16:53  ho

	* sysdep/: bsdi/GNUmakefile.sysdep, bsdi/Makefile.sysdep,
	  bsdi/sysdep-os.h, bsdi/sysdep.c, darwin/GNUmakefile.sysdep,
	  darwin/Makefile.sysdep, darwin/sysdep-os.h, darwin/sysdep.c,
	  freebsd/GNUmakefile.sysdep, freebsd/Makefile.sysdep,
	  freebsd/sysdep-os.h, freebsd/sysdep.c,
	  freeswan/GNUmakefile.sysdep, freeswan/Makefile.sysdep,
	  freeswan/klips.c, freeswan/klips.h, freeswan/sysdep-os.h,
	  freeswan/sysdep.c, netbsd/GNUmakefile.sysdep,
	  netbsd/Makefile.sysdep, netbsd/sysdep-os.h, netbsd/sysdep.c,
	  openbsd/GNUmakefile.sysdep, openbsd/Makefile.sysdep,
	  openbsd/keynote_compat.c, openbsd/sysdep-os.h, openbsd/sysdep.c:
	  Remove clauses 3 and 4. Approved by markus@ and niklas@.

2003-06-03 16:52  ho

	* sysdep/common/: blf.h, libsysdep/GNUmakefile, libsysdep/Makefile,
	  libsysdep/blowfish.c: Remove clauses 3 and 4. Approved by Niklas
	  Hallqvist and Niels Provos.

2003-06-03 16:39  ho

	* regress/Makefile, regress/check.sh, regress/b2n/b2ntest.c,
	  regress/crypto/cryptotest.c, regress/dh/dhtest.c,
	  regress/exchange/Makefile, regress/exchange/run.sh,
	  samples/Makefile, regress/group/grouptest.c,
	  regress/prf/prftest.c, regress/rsakeygen/Makefile,
	  regress/rsakeygen/rsakeygen.c, regress/util/utiltest.c,
	  regress/x509/Makefile, regress/x509/x509test.c: Remove clauses 3
	  and 4. Approved by Niklas Hallqvist and Niels Provos.

2003-06-03 16:35  ho

	* apps/: Makefile, certpatch/Makefile: Remove clauses 3 and 4.
	  Approved by Niklas Hallqvist and Niels Provos.

2003-06-03 16:34  ho

	* apps/keyconv/: Makefile, keyconv.8, keyconv.c, keyvalues.h:
	  Remove clause 3.

2003-06-03 16:29  ho

	* features/: aggressive, dnssec, ec, isakmp_cfg, policy, privsep,
	  x509: Remove clause 3. Approved by niklas@

2003-06-03 16:28  ho

	* GNUmakefile, Makefile, app.c, app.h, attribute.c, attribute.h,
	  cert.c, cert.h, conf.c, conf.h, connection.c, connection.h,
	  constants.c, constants.h, cookie.c, cookie.h, crypto.c, crypto.h,
	  dh.c, dh.h, dnssec.c, dnssec.h, doi.c, doi.h, exchange.h,
	  exchange_num.cst, field.c, field.h, genconstants.sh,
	  genfields.sh, gmp_util.c, gmp_util.h, hash.c, hash.h, if.c, if.h,
	  ike_aggressive.h, ike_auth.c, ike_auth.h, ike_main_mode.c,
	  ike_main_mode.h, ike_phase_1.h, ike_quick_mode.h, init.c, init.h,
	  ipsec_doi.h, ipsec_fld.fld, ipsec_num.cst, isakmp.h,
	  isakmp_cfg.c, isakmp_cfg.h, isakmp_doi.c, isakmp_doi.h,
	  isakmp_fld.fld, isakmp_num.cst, isakmpd.conf.5, log.c, log.h,
	  math_2n.c, math_2n.h, math_ec2n.c, math_ec2n.h, math_group.c,
	  math_group.h, math_mp.h, monitor.c, monitor.h, pf_key_v2.h,
	  prf.c, prf.h, sysdep.h, timer.c, timer.h, transport.c,
	  transport.h, udp.h, ui.c, ui.h, util.c, util.h: Remove clauses 3
	  and 4. With approval from Niklas Hallqvist and Niels Provos.

2003-06-03 15:16  jmc

	* isakmpd.8, isakmpd.conf.5, isakmpd.policy.5: - section reorder -
	  some mdoc fixes

2003-06-03 14:51  ho

	* conf.c, constants.c, dnssec.c, exchange.c, ike_auth.c,
	  ike_phase_1.c, ike_quick_mode.c, ipsec.c, log.c, message.c,
	  policy.c, sa.c, udp.c, x509.c: Cleanup. Use 'sizeof variable'
	  instead of magic constants.

2003-06-03 03:52  millert

	* sysdep/common/libsysdep/: strlcat.c, strlcpy.c: Use an ISC-tyle
	  license for all my code; it is simpler and more permissive.

2003-06-02 22:06  millert

	* sysdep/freeswan/sys/queue.h: Remove the advertising clause in the
	  UCB license which Berkeley rescinded 22 July 1999.  Proofed by
	  myself and Theo.

2003-05-18 23:26  ho

	* monitor.c: Add some path sanitation; only permit write operations
	  to /tmp, /var/tmp and /var/run. Opens in /etc/isakmpd/ are
	  read-only. Any other path is invalid. markus@ ok.

2003-05-18 22:46  ho

	* init.c: Style tweak.

2003-05-18 22:39  ho

	* sa.c: Add a debug message to sa_reinit() to indicate when we
	  renegotiate active connections.

2003-05-18 22:09  ho

	* monitor_fdpass.c: Forgot to remove a couple of debug messages

2003-05-18 22:06  ho

	* udp.c: struct sockaddr is not large enough in itself to contain
	  the address value. Switching to sockaddr_storage makes interface
	  rescanning work properly. niklas@ ok.

2003-05-18 21:37  ho

	* conf.c, ike_auth.c, isakmpd.c, log.c, monitor.c, monitor.h,
	  monitor_fdpass.c, pf_key_v2.c, policy.c: More isakmpd privsep
	  work. X509 private keys are now kept in the privileged process
	  only. Various cleanup and bugfixes.  markus@ ok

2003-05-18 20:16  ho

	* GNUmakefile, pf_key_v2.c, udp.c, sysdep/linux/GNUmakefile.sysdep,
	  sysdep/linux/sysdep-os.h, sysdep/linux/sysdep.c: Sysdep for
	  native Linux IPSec, 2.5 and later. From Thomas Walpuski, with
	  various tweaks by me. niklas@ ok.

2003-05-17 19:39  ho

	* monitor.h, monitor_fdpass.c: Better return codes from mm_send_fd
	  and mm_receive_fd

2003-05-17 19:32  ho

	* monitor_fdpass.c: Use log_error(), not log_fatal().  Style.

2003-05-17 19:26  jmc

	* isakmpd.conf.5: tweak; ok ho@

2003-05-16 22:31  ho

	* init.c, isakmpd.conf.5, sa.c, sa.h: If the "Renegotiate-on-HUP"
	  tag is defined in the [General] section, a HUP signal (or "R" to
	  the FIFO) will also renegotiate all Phase 2 SAs, i.e all
	  connections.	ok niklas@, tested and ok kjell@.

2003-05-15 05:20  ho

	* ike_auth.c: Correct a two year old typo, which might actually
	  make setsockopt(..., IP_IPSEC_LOCAL_AUTH, ...) start working.

2003-05-15 04:28  ho

	* exchange.c, ike_auth.c, sa.c, sa.h: Cleanup. Do not store the
	  private key in either the exchange or sa structs.

2003-05-15 04:08  ho

	* ike_auth.c: Work around some OpenSSL BIO "features" to read the
	  key correctly.

2003-05-15 04:04  ho

	* monitor.c: Proper exit of the monitor process.

2003-05-15 03:51  ho

	* monitor.c: wait() for the child process

2003-05-15 02:28  ho

	* Makefile, conf.c, conf.h, ike_auth.c, init.c, isakmpd.c, log.c,
	  monitor.c, monitor.h, monitor_fdpass.c, pf_key_v2.c, policy.c,
	  udp.c, ui.c, util.c, features/privsep, sysdep/openbsd/sysdep.c:
	  Start of privilege separation for isakmpd.  There are some kinks
	  left, so keep it default disabled for now.  markus@ says ok to
	  commit.

2003-05-15 02:24  ho

	* log.h: (c)

2003-05-15 01:44  kjell

	* pf_key_v2.c: properly terminate debug string (levels >=40) Use
	  "%.*s" as suggested by Niklas.  ok ho@. Lost by kjell. oked ho@.
	  lost by kjell again. oked ho@

2003-05-15 01:29  ho

	* features/policy: Remove the .if/.endif stuff that gmake does not
	  understand.  Replace with a comment about needing keynote for
	  policy.

2003-05-14 22:49  ho

	* GNUmakefile, Makefile, sysdep/freeswan/GNUmakefile.sysdep,
	  sysdep/freeswan/Makefile.sysdep, sysdep/freeswan/README,
	  sysdep/freeswan/klips.c, sysdep/freeswan/klips.h,
	  sysdep/freeswan/sysdep-os.h, sysdep/freeswan/sysdep.c,
	  sysdep/freeswan/sys/queue.h, sysdep/linux/GNUmakefile.sysdep,
	  sysdep/linux/Makefile.sysdep, sysdep/linux/README,
	  sysdep/linux/klips.c, sysdep/linux/klips.h,
	  sysdep/linux/sysdep-os.h, sysdep/linux/sysdep.c: Call the
	  FreeS/WAN sysdep 'freeswan'. The 'linux' sysdep will be native
	  Linux IPSec.

2003-05-14 20:11  ho

	* conf.c, conf.h, ike_auth.c: Default public key directory
	  definition sanity.

2003-05-14 20:10  ho

	* policy.c, policy.h: Policy file default defined twice, kill the
	  local copy.

2003-05-14 20:08  ho

	* isakmpd.c: Fix a typo (in unused code).

2003-05-14 19:37  ho

	* ipsec.c, ipsec_num.cst, pf_key_v2.c, policy.c, sa.c: I did not
	  test this enough. Unbreak.

2003-05-12 23:48  ho

	* isakmp_num.cst: Update with some data for NAT-T specific payload
	  types, IKEv2 notifications, ISAKMP EAP code and types, plus fix
	  an old typo.

2003-05-12 23:43  ho

	* ipsec.c, pf_key_v2.c, policy.c, sa.c: AES -> AES_128_CBC

2003-05-12 23:42  ho

	* ipsec_num.cst: Add two more encapsulation types (UDP encap,
	  potential future NAT-T) Add BLOCK_SIZE attribute Rename
	  IPSEC_ESP_AES -> IPSEC_ESP_AES_128_CBC.

2003-05-12 01:17  ho

	* genconstants.sh: Slight style fix for .cst files. Permit comments
	  also after a definition.

2003-05-11 04:16  markus

	* pf_key_v2.c: fix ID-type for ipv6; ok niklas; report fries

2003-05-10 23:13  jmc

	* isakmpd.8, isakmpd.conf.5: typos;

2003-04-30 17:15  jason

	* conf.c: cast size_t to unsigned long and use %lu;ok ho

2003-04-27 13:17  ho

	* isakmpd.8: Describe the 'C set' FIFO command better. (PR#3148,
	  also)

2003-04-27 13:16  ho

	* ui.c: Make the 'C set' FIFO command work as expected. PR#3148.

2003-04-14 15:08  ho

	* isakmpd.c: Unlink FIFO and pid files on clean shutdown. PR#3199

2003-04-14 12:22  ho

	* pf_key_v2.c: More snprintf style

2003-04-14 12:14  ho

	* pf_key_v2.c: A "%d" is 12 chars, not 10. Use sizeof num instead
	  of '10' in snprintf. From Theo.

2003-04-09 17:46  ho

	* x509.c: Less noise for missing crl dir, demoted to debug message.

2003-03-21 16:13  markus

	* isakmpd.conf.5: document [initiator-id] section;
	  richb@timestone.com.au; ok ho@, jmc@

2003-03-20 20:39  margarida

	* isakmp_cfg.c: Pull patch from current: Fix by ho@.  Proper
	  id_string for SET/ACK responder, plus attr payload fixes.

	  ok millert@ markus@ ho@

2003-03-16 09:13  matthieu

	* samples/: VPN-east.conf, VPN-west.conf: secrity -> security. Ok
	  ho@

2003-03-14 15:49  ho

	* math_group.c, transport.c, sysdep/common/blf.h,
	  sysdep/common/libsysdep/blowfish.c: Spelling fixes from david@.
	  jmc@ ok.

2003-03-13 14:24  ho

	* ike_auth.c: Might as well do blinding here too.

2003-03-13 11:31  ho

	* util.c: Avoid "j += snprintf()". niklas@ ok.

2003-03-06 21:29  jmc

	* isakmpd.conf.5, isakmpd.policy.5: .Xr typos;

	  ok deraadt@

2003-03-06 15:22  cedric

	* util.c: fix text2sockaddr() when HAVE_GETNAMEINFO is false and
	  port is NULL.  ok ho@

2003-03-06 14:48  cedric

	* field.c: "len" is decremented too early, so the second argument
	  of the snprintf call is too small on last run of the loop.  ok
	  ho@

2003-03-06 14:32  ho

	* exchange.c: Bad cut'n'paste msg plus style fixes.

2003-03-06 10:56  ho

	* util.c: Less ambiguous l-value usage. Noted by cedric@

2003-03-06 05:07  david

	* apps/keyconv/keyconv.8: date should be written formally: .Dd
	  Month day, year ok henning@ jmc@

2003-03-03 17:51  ho

	* isakmpd.conf.5: Re-add the BUGS section; the RFCs still do not
	  permit differing DH groups in the same proposal. This time,
	  mention that this also applies to mixing PFS and non-PFS suites.

2003-02-26 23:55  ho

	* samples/VPN-west.conf: Typo/pasto. Spotted by Tim Donahue.

2003-02-26 09:17  david

	* exchange.c: IPsec is written ``IPsec'', not ``IPSec''.  ok ho@

2003-02-24 13:01  markus

	* pf_key_v2.c: pf_key_v2_flow: typo in debug msg (KAME)

2003-02-22 07:57  kjell

	* README: typo: noneheless->nontheless

2003-02-22 07:56  kjell

	* isakmpd.8, isakmpd.conf.5: Clarify some language, grammar. ho@
	  okayed this many moons ago, and I forgot all about it.

2003-02-12 16:11  markus

	* if.c, if.h, udp.c: better error checking on bind(); from
	  Alexander_Bluhm at genua.de; ok ho@

2003-02-05 11:29  jmc

	* isakmpd.8: typos; isakmpd(8) ok niklas@, mailwrapper(8) help
	  kjell@

2003-02-04 21:02  markus

	* conf.c: don't set the Transform for Default-phase-1-configuration
	  twice, ok ho@

2003-02-04 21:02  markus

	* conf.h: default to 3DES-SHA-RSA_SIG (same as in OpenBSD 3.2); ok
	  ho@

2003-01-22 16:13  ho

	* ike_auth.c: Typo.

2003-01-20 20:52  deraadt

	* isakmpd.policy.5: typos; alan@alanday.com
