#
ef150c2b |
| 11-Mar-2024 |
Richard Lowe |
16394 illumos should learn that the getopt(3C) family return int Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Reviewed by: Andy F
16394 illumos should learn that the getopt(3C) family return int Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Reviewed by: Andy Fiddaman <illumos@fiddaman.net> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
show more ...
|
#
78af48de |
| 10-Mar-2023 |
Toomas Soome |
15756 ipsecutils: the comparison will always evaluate as 'true' Reviewed by: Bill Sommerfeld <sommerfeld@alum.mit.edu> Reviewed by: Dan McDonald <danmcd@mnx.io> Approved by: Robert Mustac
15756 ipsecutils: the comparison will always evaluate as 'true' Reviewed by: Bill Sommerfeld <sommerfeld@alum.mit.edu> Reviewed by: Dan McDonald <danmcd@mnx.io> Approved by: Robert Mustacchi <rm@fingolfin.org>
show more ...
|
#
bbf21555 |
| 26-Feb-2022 |
Richard Lowe |
14443 resection manual pages per IPD4 Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Peter Tribble <peter.tribble@gmail.com> R
14443 resection manual pages per IPD4 Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Andy Fiddaman <andy@omnios.org> Approved by: Dan McDonald <danmcd@joyent.com>
show more ...
|
#
95c74518 |
| 23-Jan-2019 |
Toomas Soome |
11296 cmd-inet: NULL pointer errors Reviewed by: Andy Stormont <astormont@racktopsystems.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Garrett D'Amore <garrett@damor
11296 cmd-inet: NULL pointer errors Reviewed by: Andy Stormont <astormont@racktopsystems.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Garrett D'Amore <garrett@damore.org>
show more ...
|
#
0fddcadb |
| 15-Jul-2017 |
Toomas Soome |
9296 ipsecutils: this statement may fall through Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Andy Fiddaman <omnios@citrus-it.net> Approved by: Gordon Ross <gwr@nexen
9296 ipsecutils: this statement may fall through Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Andy Fiddaman <omnios@citrus-it.net> Approved by: Gordon Ross <gwr@nexenta.com>
show more ...
|
#
41c215c2 |
| 19-Apr-2010 |
Paul Wernau |
PSARC 2010/101 in.iked preshared key file extensions 6511591 Support at least remote-prefixes for preshared key entries
|
#
5d01c172 |
| 12-Apr-2010 |
Vladimir Kotal |
PSARC 2010/102 ikeadm dump algs 6927650 provide the list of DH groups in ikeadm 6927657 provide the list of algorithms offered by iked for IKE in ikeadm
|
#
46c08a97 |
| 11-Mar-2010 |
Bill Sommerfeld |
PSARC 2010/055 ECP and RFC5114 groups for IKE 6586320 RFC 4753 ECP groups needed for IKE 6900895 RFC 5114 ECP Diffie-Hellman groups 6897862 RFC 5114 integer modulus Diffie-Hellman groups
|
#
510c3f91 |
| 22-Dec-2009 |
Vladimir Kotal |
6874992 in.iked does not use network byte order for IP address in sendto() call 6874983 ikedoor.h is not C++ safe 6885833 IPsec utilities should print lifetimes in human readable format 6
6874992 in.iked does not use network byte order for IP address in sendto() call 6874983 ikedoor.h is not C++ safe 6885833 IPsec utilities should print lifetimes in human readable format 6889086 ikeadm reports kilobyte lifetimes with wrong units 6898492 iked should enforce lower maximum values for lifetimes 6897711 iked debug output should be less confusing for average sysadmin 6902926 SOFT kilobyte expires for inbound SAs should make it to userland and be reacted upon
show more ...
|
#
d0115d88 |
| 20-Nov-2009 |
Mark Fenwick |
6900753 Calls to dump_key in ikeadm.c could be refactored 6896962 ipsecconf incorrectly parses misconfigured hyphenated tokens 6898695 ipsecalgs -s causes kernel buffer corruption 6440628
6900753 Calls to dump_key in ikeadm.c could be refactored 6896962 ipsecconf incorrectly parses misconfigured hyphenated tokens 6898695 ipsecalgs -s causes kernel buffer corruption 6440628 ipseckey should ensure that argument is a file before parsing
show more ...
|
#
5d3b8cb7 |
| 02-Nov-2009 |
Bill Sommerfeld |
PSARC/2008/252 Labeled IPsec phase 1 6886771 Labeled IPsec phase 1 6808727 Alignment error panic in tsol_can_accept_raw() 6894979 nightly -0 + -p builds then destroys SUNW0on
|
#
628b0c67 |
| 21-Oct-2009 |
Mark Fenwick |
PSARC 2009/513 Changes to IPsec ESP to support Combined mode ciphers 6704686 IPsec/ESP needs to support Combined mode ciphers 6704682 IPsec/ESP should use AES-CCM 6884664 IPsec/ESP should
PSARC 2009/513 Changes to IPsec ESP to support Combined mode ciphers 6704686 IPsec/ESP needs to support Combined mode ciphers 6704682 IPsec/ESP should use AES-CCM 6884664 IPsec/ESP should support AES-GCM Mode 6840342 ipsecalgs out of memory error 6764184 tab instead of space in sadb.h
show more ...
|
#
dc739ced |
| 24-Apr-2009 |
Dan McDonald |
6824443 Make in.iked a 64-bit process when possible.
|
#
bfe6f8f5 |
| 18-Mar-2009 |
Vladimir Kotal |
6520458 ikeadm should have command line history capabilities 4313953 ipseckey(1m) needs line editing support. 6814629 ipseckey should employ strict checking for {dump,flush} commands
|
#
c7777ac8 |
| 21-Jan-2009 |
Paul Wernau |
PSARC 2008/525 ikeadm token login 6219638 in.iked(1m) should not have to read PKCS#11 pins off-disk 6780866 ikeadm should use authorizations
|
#
a14de6c8 |
| 21-Nov-2008 |
Dan McDonald |
6762791 race condition found in ipsecah during ipsec-persock test 6767912 DPD needs to be less aggressive. 6768512 ikeadm(1m) doesn't print in-progress DPD
|
#
9c2c14ab |
| 29-Sep-2008 |
Thejaswini Singarajipura |
PSARC 2008/523 IPsec session failover 6398024 IPsec should support session failover across machines 6545486 PF_KEY needs to set an SA's sequence number
|
#
4b56a003 |
| 27-Aug-2008 |
Daniel Anderson |
5007142 Add ntohll and htonll to sys/byteorder.h 6717509 Need to use bswap/bswapq for byte swap of 64-bit integer on x32/x64 PSARC 2008/474 Add 64-bit htonll() and ntohll() byte order convers
5007142 Add ntohll and htonll to sys/byteorder.h 6717509 Need to use bswap/bswapq for byte swap of 64-bit integer on x32/x64 PSARC 2008/474 Add 64-bit htonll() and ntohll() byte order conversion functions
show more ...
|
#
349233ac |
| 18-Mar-2008 |
pwernau |
6671705 ikeadm dump p1 shows bogus values for keylength 6673306 ikeadm does not print phase 1 oakley group used in negotiation 6673443 ikeadm shows PRF as unknown when it should be unavailable
|
#
0358d3a6 |
| 01-Mar-2008 |
danmcd |
PSARC 2008/014 SHA-2 support for IPsec and IKE 6586319 Need to enable SHA-256,384,512 support in AH, ESP, and IKE 6663271 sha2_mac_verify_atomic() function is missing SHA384 exceptions
|
#
a12f8217 |
| 29-Feb-2008 |
pwernau |
6658263 ipseckey and ikeadm don't print ASN.1 ID values
|
#
1a6921e0 |
| 10-Oct-2007 |
markfen |
6516622 ACQUIRE-specified lifetimes are now ignored by in.iked 6609988 superfluous debugging in isakmp_udp.c 6612767 Logfile time stamp for in.iked a bit OTT 6612771 Some in.iked messages
6516622 ACQUIRE-specified lifetimes are now ignored by in.iked 6609988 superfluous debugging in isakmp_udp.c 6612767 Logfile time stamp for in.iked a bit OTT 6612771 Some in.iked messages contain information thats no longer useful
show more ...
|
#
bb3ed8df |
| 15-Aug-2007 |
pwernau |
6585305 in.iked in debug mode needs to show phase 2 alg proposals and PF_KEY message contents
|
#
020bf065 |
| 25-Jul-2007 |
markfen |
PSARC/2007/409 RFC 3526 Diffie-Hellman groups for IKE 4886779 RFC 3526 Diffie-Hellman groups for IKE
|
#
25e435e0 |
| 29-May-2007 |
pwernau |
6561665 ipseckey -f does not understand "flush" keyword anymore
|