CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/11/09 06:31:36
Modified files:
sbin/isakmpd : Makefile app.c app.h conf.c dpd.c init.c
isakmpd.c log.c pf_key_v2.c pf_key_v2.h ui.c
ui.h
sbin/iked : config.c control.c iked.c iked.h ikev2.c
ikev2_msg.c parse.y proc.c types.h
Added files:
sbin/isakmpd : ikedmode.c ikedmode.h ikedmode_show.c
transport_imsg.c
Log message:
iked(8): Implement IKEv1 prototype
This change brings the IKEv1 protocol stack to iked -- by running
isakmpd(8) as unprivileged IKEv1 subprocess.
This is experimental and still limited:
- The main and quick mode suites are fixed to aes128cbc, hmac2-256,
modp3072 and ESP aes128cbc, hmac2-256 and PFS modp3072
- Only PSK authentication for now.
Nonetheless, tunnels are established and work . And iked(8) is
able to interop with both isakmpd(8) and iked(8) IKEv1.
If this works out good enough, isakmpd(8) will be retired. One
day.
ok deraadt@
