Volker Rümelin
d17b780eaa
farp: Fix BPF jump false offset
...
Jump to BPF_STMT(BPF_RET+BPF_K, 0) if protocol_size != 4
2016-10-31 14:46:14 +01:00
Volker Rümelin
05db0f97e3
ikev1: Add fragmentation support for Windows peers
...
I still think ipsec/l2tp with fragmentation support is a useful
fallback option in case the Windows IKEv2 connection fails because
of fragmentation problems.
Tested with Windows XP, 7 and 8.1.
2014-10-10 10:54:37 +02:00
Volker Rümelin
643da9d2e6
ikev1: Properly initialize list of fragments in case fragment ID is 0
...
Fixes CVE-2013-6076.
2013-10-31 21:58:42 +01:00
Volker Rümelin
f8298b9f98
host-resolver: don't try to resolve a plain v4 address to an IPv6 address
...
Suppress 'Address family for hostname not supported' errors if a IPv6
client connects in a mixed IPv4/IPv6 environment.
2013-05-16 11:03:37 +02:00
Volker Rümelin
6d3e7a64a0
IKEv1 support for PKCS#7 wrapped certificates
2013-01-11 10:21:56 +01:00
Volker Rümelin
10eee5fcba
Fixed some typos in comments
2013-01-11 10:21:51 +01:00
Volker Rümelin
0ff8d20a89
Add support for draft-ietf-ipsec-nat-t-ike-03 and earlier
...
This adds support for early versions of the draft that eventually
resulted in RFC 3947.
2012-12-19 11:03:42 +01:00
Volker Rümelin