summaryrefslogtreecommitdiffstats
path: root/ipsec-tools (unfollow)
Commit message (Collapse)AuthorFilesLines
2023-05-31ipsec-tools: Fix copying fd_set prior to selectChristian Mauderer1-0/+7
The racoon session code copies an fd_set from one variable into another prior to calling select. That works well for simple structures. In libbsd we have to allocate fd_sets instead of using fixed structures to avoid a problem with file numbers bigger than FD_SETSIZE. The simple assignment didn't work in that case. This patch makes sure that a memcpy is used instead. Update #4913
2022-06-22ipsec-tools: Do not use signalsSebastian Huber3-14/+24
2022-06-22racoon: Do not rely on <sys/types.h>Sebastian Huber1-1/+1
2022-02-24ipsec-tools: Reduce allocated buffer sizeChristian Mauderer1-0/+10
By default, pfkey allocates a 2MB buffer that is used for SPD entries. This size is a good choice for a server system where a lot of clients should be handled. But on our embedded systems, an application with that much clients is unlikely and 2MB is a lot of space. So reduce that to the default value of 128kB which should be enough for a small number of ipsec connections. See https://bugzilla.redhat.com/show_bug.cgi?id=607361 for more details why the upstream project originally increased the size. If someone really needs a bigger size, there is a option in the configuration file of pfkey called `pfkey_buffer` that can overwrite this value. Closes #4621
2021-06-16racoon: Fix build with current toolchainChristian Mauderer1-2/+2
During some newlib version, the _types_fd_set has been replaced with just fd_set.
2021-05-11ipsec-tools/pfkey: Fix socket leakChristian Mauderer1-0/+7
setkey uses pfkey_open to open a socket. But setkey doesn't close the socket. The libipsec functions are used only by user space applications (setkey and racoon). Adding the wrapper for socket makes sure that the opened socket is registered and closes if the application exits. Fixes #4405
2021-03-26racoon/session: Honor file descriptor maximumChristian Mauderer2-3/+43
Dynamically allocate a big enough file descriptor set for select(). A better solution would be to use kqueue() instead of select(). Update #4360
2020-08-05racoon: Change type due to Newlib API changesSebastian Huber1-2/+2
2018-10-25Update to FreeBSD head 2018-10-23Sebastian Huber23-1909/+684
Git mirror commit 59f44d20be3f99d181ca742e636d45fc39ec982b. This commit updates OpenSSL to version 1.1.1. This required an update of racoon which uses some internal stuff from OpenSSL and seems to be mostly unmaintained, e.g. there is update in the FreeBSD ports to cope with OpenSSL 1.1.1. Update #3472.
2018-08-02ipsec-tools: Port libipsec, setkey and racoon.Christian Mauderer150-12792/+9697
Note that this replaces the libipsec from FreeBSD with the one provided by ipsec-tools.
2018-08-01ipsec-tools: Apply patches from FreeBSD ports.Christian Mauderer12-51/+141
Source: https://svnweb.freebsd.org/ports/head/security/ipsec-tools/files/ revision 468617.
2018-08-01Import ipsec-tools 0.8.2.Christian Mauderer228-0/+165026
Import unchanged ipsec-tools sources in the release version 0.8.2. The homepage of ipsec-tools is http://ipsec-tools.sourceforge.net/. The sources can be obtained from there.