delete unneccessary arpa/nameser.h includes
ok millert

Spacing, no object change.

space -> tab

No object change.

<stdlib.h> is included, so do not need to cast result from
malloc, calloc, realloc*
ok krw millert

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

Make deterministic randomness (only ever used for testing) a compile-time
option. Reduces chances of somehow setting regrand when it's not supposed
to be set. Remove "-r" option from man page. Also xref certpatch(8) while
we are in there. And remove some include sysdep.h where it is no longer
needed.
OK hshoexer

spacing; ok cloder

where possible, use bzero instead of memset

ok cloder henning

KNF, style, 80c, etc. hshoexer@ ok

Some more KNF, no binary change.

ok ho@

partial move to KNF. More to come. This has happened because there
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our standard
auditing process. ok ho hshoexer

Style nits.

Remove clauses 3 and 4. With approval from Niklas Hallqvist and
Niels Provos.

Cleanup. Use 'sizeof variable' instead of magic constants.

The dlopen() stuff goes away.

rm trailing whitespace

str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintf

recieve -> receive

USER_FQDN ID support, untested.

Rewrite to do lookups depending on ID type. IPv4 and FQDN only for now.

add support for getrrsetbyname(3) from libc. ok ho@.

Remove inaccurate "Assumes IPv4" comments.

Change get_src/get_dst API as we get the length with sa_len.

Don't assume IPv4. Initial IPv6 support.

Consistently use "IPsec" capitalization (jsyn@nthought.com)

Call OpenSSL functions with LC (). Various style nits.

(c) 2001

Preliminary but working code to permit IKE authentication using DNSSEC
validated KEY records. Uses lwresd from the bind-9.1.0 port.
Enable by adding 'dnssec' to FEATURES.

Spacing, no object change.

space -> tab

No object change.

<stdlib.h> is included, so do not need to cast result from
malloc, calloc, realloc*
ok krw millert

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

Make deterministic randomness (only ever used for testing) a compile-time
option. Reduces chances of somehow setting regrand when it's not supposed
to be set. Remove "-r" option from man page. Also xref certpatch(8) while
we are in there. And remove some include sysdep.h where it is no longer
needed.
OK hshoexer

spacing; ok cloder

where possible, use bzero instead of memset

ok cloder henning

KNF, style, 80c, etc. hshoexer@ ok

Some more KNF, no binary change.

ok ho@

partial move to KNF. More to come. This has happened because there
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our standard
auditing process. ok ho hshoexer

Style nits.

Remove clauses 3 and 4. With approval from Niklas Hallqvist and
Niels Provos.

Cleanup. Use 'sizeof variable' instead of magic constants.

The dlopen() stuff goes away.

rm trailing whitespace

str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintf

recieve -> receive

USER_FQDN ID support, untested.

Rewrite to do lookups depending on ID type. IPv4 and FQDN only for now.

add support for getrrsetbyname(3) from libc. ok ho@.

Remove inaccurate "Assumes IPv4" comments.

Change get_src/get_dst API as we get the length with sa_len.

Don't assume IPv4. Initial IPv6 support.

Consistently use "IPsec" capitalization (jsyn@nthought.com)

Call OpenSSL functions with LC (). Various style nits.

(c) 2001

Preliminary but working code to permit IKE authentication using DNSSEC
validated KEY records. Uses lwresd from the bind-9.1.0 port.
Enable by adding 'dnssec' to FEATURES.