summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-01-07We are not windows. Minus 500 lines.Florian Obser
OK millert
2020-01-07Remove thread support. Minus 4k lines.Florian Obser
OK millert
2020-01-07We are never going to use GeoIP support. Minus 1.8k lines.Florian Obser
OK millert
2020-01-07If the client provides a TLS certificate and the user specifies aAlexander Bluhm
hash value on the nc(1) server command line, the netcat server must use the TLS context of the accepted socket for verification. As the listening socket was used instead, the verification was always successful. If the peer provides a certificate, there must be a hash. Make the hash verification fail safe. OK tb@
2020-01-07Add netcat tests with TLS client certificate.Alexander Bluhm
2020-01-07Link ESP-SA and IPcomp-SA using GRPSPIS instead of using a self-builttobhe
solution for multi-SA flows. As a result we only need a single outgoing IPCOMP flow and can get rid of the two extra transport mode flows for ESP. ok bluhm@
2020-01-07zap trailing whitespace;Jason McIntyre
2020-01-07Clarify that zero matches are not an error.Vadim Zhukov
input & okay schwarze@
2020-01-06Add regression tests for netcat. Currently netcat server and clientAlexander Bluhm
get started and connect with each other. The protocols TCP, TLS, UDP, and UNIX domain stream and datagram sockets are covered.
2020-01-07Improve the description of -m/-M/MANPATH/man.conf in multiple respectsIngo Schwarze
after kn@ reported that the descriptions were incomplete and somewhat inaccurate. OK jmc@ kn@
2020-01-07ZYD_INTR_TIMEOUT is expressed in msecs not in ticks, fixes that by callingMartin Pieuchot
tsleep_nsec(9). Tested by and ok stsp@
2020-01-06Link nc regress to build.Alexander Bluhm
2020-01-06Add regression tests for netcat. Currently netcat server and clientAlexander Bluhm
get started and connect with each other. The protocols TCP, TLS, UDP, and UNIX domain stream and datagram sockets are covered.
2020-01-06Implement scrolling in top(1) using 9 and 0 keys.Vadim Zhukov
Planned improvements: scroll position displaying, using arrow/pgup/pgdown keys. okay tedu@
2020-01-06Add "-n" to EXAMPLES in crontab(5)'s man pagejob
OK Ingo Schwarze
2020-01-06The unveil(2) for nc -U -u -l was wrong. The server cannot unveilAlexander Bluhm
the file system as it has to connect to the UNIX domain client socket. The path of the latter is determined dynamically. Instead add a restrictive pledge(2) after connect(2). OK tb@
2020-01-06Remove redundant BPIALL instructions (since ICIALLU already invalidates theMark Kettenis
BP cache if necessary). ok patrick@
2020-01-06delete ridiculous DIAGNOSTICS section that goes without sayingIngo Schwarze
2020-01-06configure args fixes;Stuart Henderson
--disable-idn should be --without-idn --disable-openssl-version-check was a for some old versions of OpenSSL with security bugs and was removed some time ago fixes "Unrecognized options" that florian@ noticed was displayed by configure.
2020-01-06We don't need libbind9 if we remove a thick wrapper around getaddrinfoFlorian Obser
and move the remaining bits to dighost.c. Minus 4k lines. OK sthen
2020-01-06we are not using libiscccFlorian Obser
OK sthen
2020-01-06We only need the config parser from liblwres.Florian Obser
This pulls out the config object (lwres_conf_t) from the context (lwres_context_t), switches to libc functions (lwres_net_ntop vs inet_ntop etc ) and removes a lwres_ prefix from number types (lwres_uint8_t vs uint8_t etc). With that we can nearly empty out lib/lwres and lose about 20k lines in the process. OK sthen
2020-01-06We are not using libirs.Florian Obser
OK sthen
2020-01-06Rewrite the armv7 context switch code. The new code is much closer to theMark Kettenis
arm64 version and fixes some (but not all) remaining issues with SMP support on armv7. ok visa@, patrick@
2020-01-06Missed one s -> S in locking comment. Noticed by visa@Claudio Jeker
2020-01-06Use a capital S for refer to the sigio_lock since it is a global lock.Claudio Jeker
OK visa@
2020-01-06When using UNIX domain sockets, always call report_sock() with theAlexander Bluhm
path name of the socket. This avoids bad errors from getnameinfo(3). Use the same error check for both calls to getnameinfo(3). OK millert@ tb@
2020-01-06document the defaults for several query options;Ingo Schwarze
OK jmc@
2020-01-06make it more explicit that filters are unique processesGilles Chehade
2020-01-06Print a few more registers when we hit a uvm_fault in the kernel.Mark Kettenis
2020-01-06Allow ipmi(4) to attach using mmio. Use the IPMI revision provided by theMark Kettenis
_SRV method if present. tested by sthen@ ok jmatthew@
2020-01-06do not allow passing options to smtpctl encryptGilles Chehade
2020-01-06provide a better error message for invalid smtpctl commandsGilles Chehade
2020-01-06Use type M_KEVENT instead of M_TEMP when allocating kqueue-relatedVisa Hankala
data buffers. OK bluhm@, mpi@, anton@
2020-01-06Make kqlist part of filedesc and serialize access to it using fdplock.Visa Hankala
This choice of locking is guided by knote_fdclose(). OK mpi@, anton@
2020-01-06put the fido options in a list, and tidy up the text a little;Jason McIntyre
ok djm
2020-01-06missing else in check_enroll_options()Damien Miller
2020-01-06fix error messageDamien Miller
2020-01-06adapt sk-dummy to SK API changesDamien Miller
also, make it pull prototypes directly from sk-api.c and #error if the expected version changes. This will make any future regress test breakage because of SK API changes much more apparent
2020-01-06Extends the SK API to accept a set of key/value options for allDamien Miller
operations. These are intended to future-proof the API a little by making it easier to specify additional fields for without having to change the API version for each. At present, only two options are defined: one to explicitly specify the device for an operation (rather than accepting the middleware's autoselection) and another to specify the FIDO2 username that may be used when generating a resident key. These new options may be invoked at key generation time via ssh-keygen -O This also implements a suggestion from Markus to avoid "int" in favour of uint32_t for the algorithm argument in the API, to make implementation of ssh-sk-client/helper a little easier. feedback, fixes and ok markus@
2020-01-05Common function to free key bindings.Nicholas Marriott
2020-01-05Zero initialize cpus and memory variables up frontkn
2020-01-05Convert to tsleep_nsec(9).Martin Pieuchot
ok mglocker@
2020-01-05fix CanonicalizeHostname, broken by rev 1.507Bob Beck
Issue noticed and reported by Pierre-Olivier Martel <pom@apple.com> ok dtucker@ markus@ djm@
2020-01-05In his original writeup, espie@ had the terse parenthetical remarkIngo Schwarze
"(yes/no answer instead of full list)" regarding how to use wantarray(). Flesh this out with an example and a bit of explanation to reduce the risk of misunderstandings and misuse. Discussed with espie@.
2020-01-05Constify instances of struct fileops.Visa Hankala
OK anton@, mpi@, bluhm@
2020-01-05regenJonathan Gray
2020-01-05remove incorrectly formatted IBM entriesJonathan Gray
they were added alongside a bunch of other devices in NetBSD rev 1.25
2020-01-05Send errors to stdout in control mode so they don't get reordered withNicholas Marriott
other output, reported by George Nachman in GitHub issue 2048.
2020-01-05regenJonathan Gray