Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE
|
#
1.10 |
|
02-Sep-2016 |
mikeb |
Adjust for the new default MODP group
|
Revision tags: OPENBSD_5_3_BASE OPENBSD_5_4_BASE OPENBSD_5_5_BASE OPENBSD_5_6_BASE OPENBSD_5_7_BASE OPENBSD_5_8_BASE OPENBSD_5_9_BASE OPENBSD_6_0_BASE
|
#
1.9 |
|
17-Sep-2012 |
markus |
sync with transform-name-fix
|
#
1.8 |
|
15-Sep-2012 |
markus |
sync with recent ipsecctl changes/fixes
|
Revision tags: OPENBSD_4_4_BASE OPENBSD_4_5_BASE OPENBSD_4_6_BASE OPENBSD_4_7_BASE OPENBSD_4_8_BASE OPENBSD_4_9_BASE OPENBSD_5_0_BASE OPENBSD_5_1_BASE OPENBSD_5_2_BASE
|
#
1.7 |
|
01-Jul-2008 |
bluhm |
Isakmpd acquire mode did not work with a config generated from ipsec.conf. The config created by isakmpd dynamically was different from the config that ipsecctl generated out of ipsec.conf.
Both config formats are changed so that they match. One needs a passive ike line and a require flow line with the same parameters in the ipsec.conf. Then the acquire message generated by the kernel will trigger isakmpd to generate a config that matches the one that ipsecctl generated from the ike line.
ok hshoexer, 'sounds good' todd
|
Revision tags: OPENBSD_4_1_BASE OPENBSD_4_2_BASE OPENBSD_4_3_BASE
|
#
1.6 |
|
30-Nov-2006 |
markus |
wrong rid for protocol
|
#
1.5 |
|
30-Nov-2006 |
markus |
sync: proto/port in lid/rid/connection
|
#
1.4 |
|
24-Nov-2006 |
markus |
fix typo for remote port; from Brian Candler
|
Revision tags: OPENBSD_4_0_BASE
|
#
1.3 |
|
18-Jun-2006 |
hshoexer |
adopt to recent changes
|
#
1.2 |
|
10-Jun-2006 |
hshoexer |
adopted to recent change.
|
#
1.1 |
|
02-Jun-2006 |
naddy |
check port modifiers in ike rules
|